CVE-2023-27998

5.3MEDIUM

Key Information:

Vendor
Fortinet
Status
FortiPresence
Vendor
CVE Published:
13 September 2023

Summary

A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.

Affected Version(s)

FortiPresence 1.2.0 <= 1.2.1

FortiPresence 1.1.0 <= 1.1.1

FortiPresence 1.0.0

References

https://fortiguard.com/psirt/FG-IR-22-288

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.