CVE-2023-41679

Summary

CVE-2023-41679 is an access control vulnerability affecting FortiManager management interfaces. Versions 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2, and all versions of 6.0 are vulnerable. An attacker with "device management" permissions and belonging to a specific ADOM can remotely and authenticatedly add and delete CLI scripts on other ADOMs, bypassing the intended access control. This vulnerability falls under the Common Weakness Enumeration (CWE) category 284. Successful exploitation may lead to significant security implications. It is recommended that affected organizations apply the necessary patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.