CVE-2023-33303

Summary

CVE-2023-33303 is a recently disclosed vulnerability affecting Fortinet FortiEDR versions 5.0.0 through 5.0.1. This issue involves insufficient session expiration, which permits attackers to execute unauthorized code or commands through API requests. By exploiting this weakness, an adversary could potentially gain unauthorized access to sensitive data or even take control of the affected system, leading to significant security risks. Organizations using FortiEDR are strongly advised to apply the available patch as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.