CVE-2023-44253

Summary

CVE-2023-44253 is a vulnerability affecting FortiManager versions 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer versions 7.4.0 through 7.4.1 and before 7.2.5, and FortiAnalyzer-BigData before 7.2.5 ([CWE-200](https://cwe.mitre.org/data/definitions/200.html)). This issue enables unauthorized actors to access sensitive information, including other adom (Administrative Domain) names and device names, through crafted HTTP or HTTPS requests. The exposure of such information can potentially lead to further exploitation and unauthorized system access. Fortinet strongly advises users to update their systems to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.