CVE-2023-36635

An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a remote authenticated read-only user to modify the interface settings via the API.

Score

CVSS 3.1 7.1 High

Status

Modified - psirt@fortinet.com

Published

2023-09-07

Last modified

2024-09-26

Weaknesses

CWE-284

Affected products

• Fortiswitchmanager (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-174