Custom Error Page Vulnerability in FortiPresence by Fortinet
CVE-2023-27998

5.3MEDIUM

Key Information:

Vendor
Fortinet
Status
FortiPresence
Vendor
CVE Published:
13 September 2023

Summary

A vulnerability exists in FortiPresence that allows unauthorized individuals to access sensitive information due to the absence of custom error pages. This flaw enables an attacker to navigate specific HTTP(s) paths from the login interface, potentially exposing confidential data.

Affected Version(s)

FortiPresence 1.2.0 <= 1.2.1

FortiPresence 1.1.0 <= 1.1.1

FortiPresence 1.0.0

References

https://fortiguard.com/psirt/FG-IR-22-288

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.