by Kastro
Paper/Archive/CVE-2023-40714

CVE-2023-40714

Fortinet FortiSIEM — A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to…

EPSS 0.7%CVSS 9.7
critical.is priorityof 100
40
CVSS 9.7 (CNA)9.7 / 10 × 3029.1Not in CISA KEV+300.0EPSS percentile 54.8.548 × 2011.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements

Affected

ProductAffectedFixed inSource
FortiSIEM7.0.0–CNA
FortiSIEM6.7.0 – 6.7.2–CNA
FortiSIEM6.6.0 – 6.6.3–CNA
FortiSIEM6.5.0 – 6.5.1–CNA

Scores by source

fortinet (CNA)9.7CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:F/RL:X/RC:C
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

reffortiguard.com/psirt/FG-IR-23-085