CVE-2023-46712CWE-284

A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows attacker to escalate its…

Medium · published January 10, 2024

CVSS v3.1
6.3
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows attacker to escalate its privilege via specifically crafted HTTP requests.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R
CVSS v4.0
Not supplied
EPSS
0.00744 · 54.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-01-10T17:51Z
EPSS history
Timeline
  • 10 JAN 17:51Z
    A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows attacker to escalate its…
    cvelistv5