CVE-2023-47543

An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacker to interact with ressources of other organizations via HTTP or HTTPS requests.

Score

CVSS 3.1 8.1 High

Status

Analyzed - psirt@fortinet.com

Published

2024-11-12

Last modified

2024-11-13

Weaknesses

CWE-639

Affected products

• Fortiportal (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-23-448