CVE-2023-44256
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal servers or perform a local port scan via a crafted HTTP request.
- Affected products
- Fortianalyzer, Fortimanager
- Fortinet Fortianalyzer
- ≤ 6.4.13, 7.0.8, 7.2.3, 7.4.0
- Fortinet Fortimanager
- ≤ 7.0.8, 7.2.3, 7.4.0
- Fix
- Available
- CVSS 3.1
- 6.5 MEDIUM
- EPSS
- 1.2% (66th percentile)
- Weakness
- CWE-918, CWE-22
- NVD status
- Modified
- Published
- 2023-10-20
Fix
Please upgrade to FortiAnalyzer version 7.4.1 or above Please upgrade to FortiAnalyzer version 7.2.4 or above Please upgrade to FortiAnalyzer version 7.0.9 or above Please upgrade to FortiManager version 7.4.1 or above Please upgrade to FortiManager version 7.2.4 or above Please upgrade to FortiManager version 7.0.9 or above
No indexed exploits for CVE-2023-44256 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2023-44256 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.