CVE-2023-46717

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Mar 12, 2024
Updated: Mar 21, 2024
CWE ID 287

Summary

CVE-2023-46717 is an improper authentication vulnerability (CWE-287) that affects FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA. It allows a readonly user to gain read-write access through successive login attempts. The vulnerability has a risk score of 67 and a base severity rating of HIGH according to NVD@NIST.gov. The exploitability score is 2.8, and the impact score is 5.9 based on CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H vector string notation. The potential danger it poses to an organization includes compromised integrity and confidentiality, with low privileges required for exploitation and no user interaction necessary. The affected products include various Fortinet devices and software solutions, posing a significant security risk that needs to be remediated promptly.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-46717 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options