CVE-2023-42787 - Vulnerability Details

Vendors	Products
Fortinet	Fortianalyzer Fortimanager

Link	Providers
https://fortiguard.com/psirt/FG-IR-23-187
https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-42787", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2023-09-14T08:37:38.657Z", "datePublished": "2023-10-10T16:48:46.963Z", "dateUpdated": "2025-02-13T17:09:41.670Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiManager", "defaultStatus": "unaffected", "versions": [{"version": "7.4.0", "status": "affected"}, {"versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.3", "status": "affected"}, {"versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.9", "status": "affected"}, {"versionType": "semver", "version": "6.4.0", "lessThanOrEqual": "6.4.13", "status": "affected"}, {"versionType": "semver", "version": "6.2.0", "lessThanOrEqual": "6.2.12", "status": "affected"}]}, {"vendor": "Fortinet", "product": "FortiAnalyzer", "defaultStatus": "unaffected", "versions": [{"version": "7.4.0", "status": "affected"}, {"versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.3", "status": "affected"}, {"versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.9", "status": "affected"}, {"versionType": "semver", "version": "6.4.0", "lessThanOrEqual": "6.4.13", "status": "affected"}, {"versionType": "semver", "version": "6.2.0", "lessThanOrEqual": "6.2.12", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A client-side enforcement of server-side security [CWE-602] vulnerability\u00a0in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2023-10-18T21:08:16.251Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-602", "description": "Improper access control", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:X"}}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiManager version 7.4.1 or above Please upgrade to FortiManager version 7.2.4 or above Please upgrade to FortiAnalyzer version 7.4.1 or above Please upgrade to FortiAnalyzer version 7.2.4 or above"}], "references": [{"name": "https://fortiguard.com/psirt/FG-IR-23-187", "url": "https://fortiguard.com/psirt/FG-IR-23-187"}, {"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:30:24.511Z"}, "title": "CVE Program Container", "references": [{"name": "https://fortiguard.com/psirt/FG-IR-23-187", "url": "https://fortiguard.com/psirt/FG-IR-23-187", "tags": ["x_transferred"]}, {"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-42787 (string)

assignerOrgId : 6abe59d8-c742-4dff-8ce8-9b0ca1073da8 (string)

state : PUBLISHED (string)

assignerShortName : fortinet (string)

dateReserved : 2023-09-14T08:37:38.657Z (string)

datePublished : 2023-10-10T16:48:46.963Z (string)

dateUpdated : 2025-02-13T17:09:41.670Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

vendor : Fortinet (string)

product : FortiManager (string)

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : 7.4.0 (string)

status : affected (string)

}

1 : { »

versionType : semver (string)

version : 7.2.0 (string)

lessThanOrEqual : 7.2.3 (string)

status : affected (string)

}

2 : { »

versionType : semver (string)

version : 7.0.0 (string)

lessThanOrEqual : 7.0.9 (string)

status : affected (string)

}

3 : { »

versionType : semver (string)

version : 6.4.0 (string)

lessThanOrEqual : 6.4.13 (string)

status : affected (string)

}

4 : { »

versionType : semver (string)

version : 6.2.0 (string)

lessThanOrEqual : 6.2.12 (string)

status : affected (string)

}

]

}

1 : { »

vendor : Fortinet (string)

product : FortiAnalyzer (string)

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : 7.4.0 (string)

status : affected (string)

}

1 : { »

versionType : semver (string)

version : 7.2.0 (string)

lessThanOrEqual : 7.2.3 (string)

status : affected (string)

}

2 : { »

versionType : semver (string)

version : 7.0.0 (string)

lessThanOrEqual : 7.0.9 (string)

status : affected (string)

}

3 : { »

versionType : semver (string)

version : 6.4.0 (string)

lessThanOrEqual : 6.4.13 (string)

status : affected (string)

}

4 : { »

versionType : semver (string)

version : 6.2.0 (string)

lessThanOrEqual : 6.2.12 (string)

status : affected (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution. (string)

}

]

providerMetadata : { »

orgId : 6abe59d8-c742-4dff-8ce8-9b0ca1073da8 (string)

shortName : fortinet (string)

dateUpdated : 2023-10-18T21:08:16.251Z (string)

}

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

cweId : CWE-602 (string)

description : Improper access control (string)

type : CWE (string)

}

]

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.2 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:X (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : Please upgrade to FortiManager version 7.4.1 or above Please upgrade to FortiManager version 7.2.4 or above Please upgrade to FortiAnalyzer version 7.4.1 or above Please upgrade to FortiAnalyzer version 7.2.4 or above (string)

}

]

references : [ »

0 : { »

name : https://fortiguard.com/psirt/FG-IR-23-187 (string)

url : https://fortiguard.com/psirt/FG-IR-23-187 (string)

}

1 : { »

url : https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T19:30:24.511Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : https://fortiguard.com/psirt/FG-IR-23-187 (string)

url : https://fortiguard.com/psirt/FG-IR-23-187 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*", "matchCriteriaId": "285EC81A-34F0-4153-82DE-6A49C05EB240", "versionEndIncluding": "6.2.12", "versionStartIncluding": "6.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*", "matchCriteriaId": "56D6A507-5B18-4F62-9B08-98122FB2F23B", "versionEndIncluding": "6.4.13", "versionStartIncluding": "6.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*", "matchCriteriaId": "CCE23C15-B42C-48DF-9435-27D5143F0B5C", "versionEndIncluding": "7.0.9", "versionStartIncluding": "7.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*", "matchCriteriaId": "B31BB84A-E622-4911-AAB4-41E57F661A8D", "versionEndIncluding": "7.2.3", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "91A9AF01-72FD-4942-A95E-71A7609B6977", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "09105C5B-378F-4E1A-B395-F43573983A26", "versionEndIncluding": "6.2.12", "versionStartIncluding": "6.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "B632AF2E-739B-4EBA-8780-8AE999C62F3E", "versionEndIncluding": "6.4.13", "versionStartIncluding": "6.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "FA1523A4-BC32-4618-897D-9B5709512FBE", "versionEndIncluding": "7.0.9", "versionStartIncluding": "7.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "7C7C73B7-2AE1-4FC2-A37A-89A085796D19", "versionEndIncluding": "7.2.3", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "DBBF7219-D15F-43C9-9A90-1A4B062431E4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A client-side enforcement of server-side security [CWE-602] vulnerability\u00a0in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution."}, {"lang": "es", "value": "Una vulnerabilidad de aplicaci\u00f3n de seguridad del lado del servidor [CWE-602] en Fortinet FortiManager versi\u00f3n 7.4.0 y anteriores a 7.2.3 y FortiAnalyzer versi\u00f3n 7.4.0 y anteriores a 7.2.3 puede permitir que un atacante remoto con privilegios bajos acceda a una consola web privilegiada a trav\u00e9s de la ejecuci\u00f3n de c\u00f3digo del lado del cliente."}], "id": "CVE-2023-42787", "lastModified": "2024-11-21T08:23:09.100", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "psirt@fortinet.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-10T17:15:12.930", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-23-187"}, {"source": "psirt@fortinet.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-23-187"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-602"}], "source": "psirt@fortinet.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 285EC81A-34F0-4153-82DE-6A49C05EB240 (string)

versionEndIncluding : 6.2.12 (string)

versionStartIncluding : 6.2.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 56D6A507-5B18-4F62-9B08-98122FB2F23B (string)

versionEndIncluding : 6.4.13 (string)

versionStartIncluding : 6.4.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* (string)

matchCriteriaId : CCE23C15-B42C-48DF-9435-27D5143F0B5C (string)

versionEndIncluding : 7.0.9 (string)

versionStartIncluding : 7.0.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B31BB84A-E622-4911-AAB4-41E57F661A8D (string)

versionEndIncluding : 7.2.3 (string)

versionStartIncluding : 7.2.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 91A9AF01-72FD-4942-A95E-71A7609B6977 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 09105C5B-378F-4E1A-B395-F43573983A26 (string)

versionEndIncluding : 6.2.12 (string)

versionStartIncluding : 6.2.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B632AF2E-739B-4EBA-8780-8AE999C62F3E (string)

versionEndIncluding : 6.4.13 (string)

versionStartIncluding : 6.4.0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FA1523A4-BC32-4618-897D-9B5709512FBE (string)

versionEndIncluding : 7.0.9 (string)

versionStartIncluding : 7.0.0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 7C7C73B7-2AE1-4FC2-A37A-89A085796D19 (string)

versionEndIncluding : 7.2.3 (string)

versionStartIncluding : 7.2.0 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DBBF7219-D15F-43C9-9A90-1A4B062431E4 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad de aplicación de seguridad del lado del servidor [CWE-602] en Fortinet FortiManager versión 7.4.0 y anteriores a 7.2.3 y FortiAnalyzer versión 7.4.0 y anteriores a 7.2.3 puede permitir que un atacante remoto con privilegios bajos acceda a una consola web privilegiada a través de la ejecución de código del lado del cliente. (string)

}

]

id : CVE-2023-42787 (string)

lastModified : 2024-11-21T08:23:09.100 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : psirt@fortinet.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-10-10T17:15:12.930 (string)

references : [ »

0 : { »

source : psirt@fortinet.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://fortiguard.com/psirt/FG-IR-23-187 (string)

}

1 : { »

source : psirt@fortinet.com (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://fortiguard.com/psirt/FG-IR-23-187 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr (string)

}

]

sourceIdentifier : psirt@fortinet.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-602 (string)

}

]

source : psirt@fortinet.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-Other (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object