CVE-2023-42787

Summary

CVE-2023-42787 is a client-side enforcement of server-side security vulnerability [CWE-602]. Affecting Fortinet FortiManager versions 7.4.0 and below 7.2.3, as well as FortiAnalyzer versions 7.4.0 and below 7.2.3, this issue permits a remote attacker with minimal privileges to execute client-side code, ultimately granting them access to the privileged web console. This flaw poses a significant risk, allowing unauthorized access and potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.