CVE-2023-28001

Summary

CVE-2023-28001 is a vulnerability affecting Fortinet FortiOS versions 7.0.0 to 7.0.12 and 7.2.0 to 7.2.4. This issue stems from insufficient session expiration in the REST API, enabling an attacker to hijack a deleted user's session and execute unauthorized code or commands. Consequently, an adversary can conduct unauthenticated actions on the FortiOS system, potentially leading to significant security compromises. Organizations using FortiOS are strongly advised to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.