Analytical use of cookies
CVE-2023-44255CVSS 4.1Firewall
CVE-2023-44255: fortianalyzer vulnerability
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests.
- CVSS
- 4.1 MEDIUM
- EPSS
- 41.38%
- Активно використовується
- немає в KEV
- Продукт
- fortianalyzer
Що відомо
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests.