Beveiligingsadvies

CVE-2023-44255

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-12 18:53:53
Laatst bijgewerkt 2024-11-13 18:27:11
Toegewezen door fortinet
CVSS-score 3.9
Status PUBLISHED

Beschrijving

An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests.