CVE-2023-44252CWE-287

** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through…

High · published December 13, 2023

CVSS v3.1
8.6
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.5th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-12-13T08:52Z
EPSS history
Timeline
  • 13 DEC 08:52Z
    ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through…
    cvelistv5