imPC@ndo IT

Tracker / CVE-2023-26205

CVE-2023-26205

High 8.1

An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script.

Affected products and versions

fortinet fortiadc
fortinet fortiadc · 6.1.0 → 6.1.6
fortinet fortiadc · 6.2.0 → 6.2.6
fortinet fortiadc · 7.0.0 → 7.0.5

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References