imPC@ndo IT

Tracker / CVE-2023-48789

CVE-2023-48789

Medium 4.3

A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker to improper access control via crafted HTTP requests.

Affected products and versions

fortinet fortiportal · 6.0.0 → 6.0.15

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References