Incomplete Cleanup Vulnerability in FortiOS and FortiProxy by Fortinet

CVE-2023-29184

What is CVE-2023-29184?

A vulnerability exists in FortiOS and FortiProxy that allows a privileged attacker to stealthily add SSH key files to the system. This can be exploited through specially crafted CLI requests, leading to unauthorized access and potential system compromise. It is crucial for users of affected versions to implement necessary security measures and updates to mitigate risks.

References