Analytical use of cookies
CVE-2023-45581CVSS 8.8Firewall
CVE-2023-45581: forticlient enterprise management server vulnerability
An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.
- CVSS
- 8.8 HIGH
- EPSS
- 52.92%
- Активно використовується
- немає в KEV
- Продукт
- forticlient enterprise management server
Що відомо
An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.