CVE-2023-41673

Summary

CVE-2023-41673 is a newly identified vulnerability affecting Fortinet FortiADC versions 7.4.0 and prior to 7.2.2. This issue involves an improper authorization flaw of type CWE-285, which enables a low-privileged user to gain unauthorized access and perform actions that should be restricted. Specifically, an attacker can read the full system configuration or even initiate a backup through HTTP or HTTPS requests, putting critical data at risk. Fortinet urges users to upgrade to a secure version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.