ГлавнаяУязвимости → CVE-2023-50176
7.5высокая

CVE-2023-50176

Описание

A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link.

Затрагиваемое ПО
Fortinet Fortios
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Источники
https://fortiguard.fortinet.com/psirt/FG-IR-23-475