Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p8rh-499j-qv73

Опубликовано: 12 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts.

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts.

EPSS

Процентиль: 39%
0.00175
Низкий

7.5 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts.

CVSS3: 7.5
fstec
почти 2 года назад

Уязвимость компонента FortiAuthenticator HA операционных систем FortiOS, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 39%
0.00175
Низкий

7.5 High

CVSS3

Дефекты

CWE-287