CVE-2023-50180

An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other admins.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@fortinet.com

Published

2024-05-14

Last modified

2024-08-02

Weaknesses

CWE-497

Affected products

• Fortiadc (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-23-433