CVE-2023-44249 - Vulnerability Details

Vendors	Products
Fortinet	Fortianalyzer Fortimanager

Link	Providers
https://fortiguard.com/psirt/FG-IR-23-201
https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-44249", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2023-09-27T12:26:48.750Z", "datePublished": "2023-10-10T16:48:38.122Z", "dateUpdated": "2025-02-13T17:13:33.898Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiManager", "defaultStatus": "unaffected", "versions": [{"version": "7.4.0", "status": "affected"}, {"versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.3", "status": "affected"}, {"versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.9", "status": "affected"}, {"versionType": "semver", "version": "6.4.0", "lessThanOrEqual": "6.4.13", "status": "affected"}, {"versionType": "semver", "version": "6.2.0", "lessThanOrEqual": "6.2.12", "status": "affected"}]}, {"vendor": "Fortinet", "product": "FortiAnalyzer", "defaultStatus": "unaffected", "versions": [{"version": "7.4.0", "status": "affected"}, {"versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.3", "status": "affected"}, {"versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.9", "status": "affected"}, {"versionType": "semver", "version": "6.4.0", "lessThanOrEqual": "6.4.13", "status": "affected"}, {"versionType": "semver", "version": "6.2.0", "lessThanOrEqual": "6.2.12", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "An authorization bypass through user-controlled key\u00a0[CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 allows a remote attacker with low privileges to read sensitive information via crafted HTTP requests."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2023-10-24T17:50:57.669Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-639", "description": "Information disclosure", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:X"}}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiManager version 7.4.1 or above Please upgrade to FortiManager version 7.2.4 or above Please upgrade to FortiAnalyzer version 7.4.1 or above Please upgrade to FortiAnalyzer version 7.2.4 or above"}], "references": [{"name": "https://fortiguard.com/psirt/FG-IR-23-201", "url": "https://fortiguard.com/psirt/FG-IR-23-201"}, {"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:59:51.964Z"}, "title": "CVE Program Container", "references": [{"name": "https://fortiguard.com/psirt/FG-IR-23-201", "url": "https://fortiguard.com/psirt/FG-IR-23-201", "tags": ["x_transferred"]}, {"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-44249 (string)

assignerOrgId : 6abe59d8-c742-4dff-8ce8-9b0ca1073da8 (string)

state : PUBLISHED (string)

assignerShortName : fortinet (string)

dateReserved : 2023-09-27T12:26:48.750Z (string)

datePublished : 2023-10-10T16:48:38.122Z (string)

dateUpdated : 2025-02-13T17:13:33.898Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

vendor : Fortinet (string)

product : FortiManager (string)

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : 7.4.0 (string)

status : affected (string)

}

1 : { »

versionType : semver (string)

version : 7.2.0 (string)

lessThanOrEqual : 7.2.3 (string)

status : affected (string)

}

2 : { »

versionType : semver (string)

version : 7.0.0 (string)

lessThanOrEqual : 7.0.9 (string)

status : affected (string)

}

3 : { »

versionType : semver (string)

version : 6.4.0 (string)

lessThanOrEqual : 6.4.13 (string)

status : affected (string)

}

4 : { »

versionType : semver (string)

version : 6.2.0 (string)

lessThanOrEqual : 6.2.12 (string)

status : affected (string)

}

]

}

1 : { »

vendor : Fortinet (string)

product : FortiAnalyzer (string)

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : 7.4.0 (string)

status : affected (string)

}

1 : { »

versionType : semver (string)

version : 7.2.0 (string)

lessThanOrEqual : 7.2.3 (string)

status : affected (string)

}

2 : { »

versionType : semver (string)

version : 7.0.0 (string)

lessThanOrEqual : 7.0.9 (string)

status : affected (string)

}

3 : { »

versionType : semver (string)

version : 6.4.0 (string)

lessThanOrEqual : 6.4.13 (string)

status : affected (string)

}

4 : { »

versionType : semver (string)

version : 6.2.0 (string)

lessThanOrEqual : 6.2.12 (string)

status : affected (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 allows a remote attacker with low privileges to read sensitive information via crafted HTTP requests. (string)

}

]

providerMetadata : { »

orgId : 6abe59d8-c742-4dff-8ce8-9b0ca1073da8 (string)

shortName : fortinet (string)

dateUpdated : 2023-10-24T17:50:57.669Z (string)

}

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

cweId : CWE-639 (string)

description : Information disclosure (string)

type : CWE (string)

}

]

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:X (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : Please upgrade to FortiManager version 7.4.1 or above Please upgrade to FortiManager version 7.2.4 or above Please upgrade to FortiAnalyzer version 7.4.1 or above Please upgrade to FortiAnalyzer version 7.2.4 or above (string)

}

]

references : [ »

0 : { »

name : https://fortiguard.com/psirt/FG-IR-23-201 (string)

url : https://fortiguard.com/psirt/FG-IR-23-201 (string)

}

1 : { »

url : https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T19:59:51.964Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : https://fortiguard.com/psirt/FG-IR-23-201 (string)

url : https://fortiguard.com/psirt/FG-IR-23-201 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*", "matchCriteriaId": "285EC81A-34F0-4153-82DE-6A49C05EB240", "versionEndIncluding": "6.2.12", "versionStartIncluding": "6.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*", "matchCriteriaId": "56D6A507-5B18-4F62-9B08-98122FB2F23B", "versionEndIncluding": "6.4.13", "versionStartIncluding": "6.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*", "matchCriteriaId": "CCE23C15-B42C-48DF-9435-27D5143F0B5C", "versionEndIncluding": "7.0.9", "versionStartIncluding": "7.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E0D5DF6-69C6-4325-94D3-D7A44862F62C", "versionEndExcluding": "7.2.4", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "91A9AF01-72FD-4942-A95E-71A7609B6977", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "09105C5B-378F-4E1A-B395-F43573983A26", "versionEndIncluding": "6.2.12", "versionStartIncluding": "6.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "B632AF2E-739B-4EBA-8780-8AE999C62F3E", "versionEndIncluding": "6.4.13", "versionStartIncluding": "6.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "FA1523A4-BC32-4618-897D-9B5709512FBE", "versionEndIncluding": "7.0.9", "versionStartIncluding": "7.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "matchCriteriaId": "5BC35BBC-5F0C-4802-8F00-643D465D43E4", "versionEndExcluding": "7.2.4", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "DBBF7219-D15F-43C9-9A90-1A4B062431E4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An authorization bypass through user-controlled key\u00a0[CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 allows a remote attacker with low privileges to read sensitive information via crafted HTTP requests."}, {"lang": "es", "value": "Una vulnerabilidad de omisi\u00f3n de autorizaci\u00f3n a trav\u00e9s de clave controlada por el usuario [CWE-639] en Fortinet FortiManager versi\u00f3n 7.4.0 y anteriores a 7.2.3 y FortiAnalyzer versi\u00f3n 7.4.0 y anteriores a 7.2.3 permite a un atacante remoto con privilegios bajos leer informaci\u00f3n confidencial a trav\u00e9s de solicitudes HTTP manipuladas."}], "id": "CVE-2023-44249", "lastModified": "2024-11-21T08:25:31.080", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "psirt@fortinet.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-10T17:15:13.047", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-23-201"}, {"source": "psirt@fortinet.com", "tags": ["Third Party Advisory"], "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-23-201"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "psirt@fortinet.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-639"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 285EC81A-34F0-4153-82DE-6A49C05EB240 (string)

versionEndIncluding : 6.2.12 (string)

versionStartIncluding : 6.2.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 56D6A507-5B18-4F62-9B08-98122FB2F23B (string)

versionEndIncluding : 6.4.13 (string)

versionStartIncluding : 6.4.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* (string)

matchCriteriaId : CCE23C15-B42C-48DF-9435-27D5143F0B5C (string)

versionEndIncluding : 7.0.9 (string)

versionStartIncluding : 7.0.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8E0D5DF6-69C6-4325-94D3-D7A44862F62C (string)

versionEndExcluding : 7.2.4 (string)

versionStartIncluding : 7.2.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 91A9AF01-72FD-4942-A95E-71A7609B6977 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 09105C5B-378F-4E1A-B395-F43573983A26 (string)

versionEndIncluding : 6.2.12 (string)

versionStartIncluding : 6.2.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B632AF2E-739B-4EBA-8780-8AE999C62F3E (string)

versionEndIncluding : 6.4.13 (string)

versionStartIncluding : 6.4.0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FA1523A4-BC32-4618-897D-9B5709512FBE (string)

versionEndIncluding : 7.0.9 (string)

versionStartIncluding : 7.0.0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5BC35BBC-5F0C-4802-8F00-643D465D43E4 (string)

versionEndExcluding : 7.2.4 (string)

versionStartIncluding : 7.2.0 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DBBF7219-D15F-43C9-9A90-1A4B062431E4 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 allows a remote attacker with low privileges to read sensitive information via crafted HTTP requests. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad de omisión de autorización a través de clave controlada por el usuario [CWE-639] en Fortinet FortiManager versión 7.4.0 y anteriores a 7.2.3 y FortiAnalyzer versión 7.4.0 y anteriores a 7.2.3 permite a un atacante remoto con privilegios bajos leer información confidencial a través de solicitudes HTTP manipuladas. (string)

}

]

id : CVE-2023-44249 (string)

lastModified : 2024-11-21T08:25:31.080 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 1.4 (number)

source : psirt@fortinet.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-10-10T17:15:13.047 (string)

references : [ »

0 : { »

source : psirt@fortinet.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://fortiguard.com/psirt/FG-IR-23-201 (string)

}

1 : { »

source : psirt@fortinet.com (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://fortiguard.com/psirt/FG-IR-23-201 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj (string)

}

]

sourceIdentifier : psirt@fortinet.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-639 (string)

}

]

source : psirt@fortinet.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-639 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object