Permissive Cross-Domain Policy Vulnerability in Fortinet FortiADC and FortiDDoS
CVE-2023-25603
5.4MEDIUM
What is CVE-2023-25603?
A permissive cross-domain policy vulnerability found in Fortinet FortiADC and FortiDDoS products exposes systems to significant security risks. This flaw allows unauthorized attackers to execute privileged actions and access sensitive information by exploiting untrusted domain permissions through specially crafted web requests. Organizations using the affected versions are advised to take immediate action to secure their systems by updating to the patched versions.
Affected Version(s)
FortiADC 7.1.0 <= 7.1.1
FortiDDoS-F 6.4.0 <= 6.4.1
FortiDDoS-F 6.3.0 <= 6.3.4