A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2023-10-10T16:48:46.963Z
Updated: 2024-08-02T19:30:24.511Z
Reserved: 2023-09-14T08:37:38.657Z
Link: CVE-2023-42787
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-10-10T17:15:12.930
Modified: 2024-11-21T08:23:09.100
Link: CVE-2023-42787
Redhat
No data.