CVE-2023-42791
Published: 20 February 2024
Summary
CVE-2023-42791 is a high-severity Relative Path Traversal (CWE-23) vulnerability in Fortinet Fortimanager. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 6.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
A relative path traversal vulnerability affects Fortinet FortiManager versions 7.4.0, 7.2.0 through 7.2.3, 7.0.0 through 7.0.8, 6.4.0 through 6.4.12, and 6.2.0 through 6.2.11. Tracked as CVE-2023-42791 and assigned CWE-23 and CWE-22, the flaw permits an attacker to execute unauthorized code or commands by sending specially crafted HTTP requests. It carries a CVSS 3.1 base score of 8.8.
An authenticated attacker with low privileges can exploit the issue remotely over the network without user interaction. Successful exploitation grants the ability to run arbitrary commands, resulting in complete loss of confidentiality, integrity, and availability on the affected FortiManager instance.
The official FortiGuard advisory FG-IR-23-189 at https://fortiguard.com/psirt/FG-IR-23-189 details available patches and mitigation steps for the listed versions. The associated EPSS score has reached a peak of 0.1437 with a current value of 0.1128.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-47221
Vulnerability details
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.