CVE-2023-50176CWE-384

CVE-2023-50176

Medium · published November 13, 2024

CVSS v3.1
4.2
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-384 · Session Fixation
Published
2024-11-13T00:15Z
Affected products (3)
ProductVersionsFixed in
fortinet/fortios≥ 7.0.0, < 7.0.147.0.14
fortinet/fortios≥ 7.2.0, < 7.2.87.2.8
fortinet/fortios≥ 7.4.0, < 7.4.47.4.4
References (1)
https://fortiguard.fortinet.com/psirt/FG-IR-23-475 · [email protected]
EPSS history
Timeline
  • 12 NOV 18:53Z
    A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized…
    cvelistv5