4.2mediumMedium
CVE-2023-50176
Fortinet Fortios
A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link.
Exploitation status
- A vendor advisory or patch reference has been published.
What the metrics mean
- It is reachable over a network, without needing local access.
- For an attacker who can reach it, exploitation depends on conditions outside the attacker's control.
- To exploit it, no account is needed.
- Beyond that, someone has to be persuaded to take an action first.
Scoring
- CVSS
- 4.2 (v3.1)
- Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N- Weakness
- CWE-384
- Assigned by
- psirt@fortinet.com
Dates
- Published
- 2024-11-12
- Last modified
- 2026-08-24
- Sources
- NVD
Affected products
- Fortinet Fortios7.0.0 - 7.0.14, 7.2.0 - 7.2.8, 7.4.0 - 7.4.4
As listed in the NVD configuration data. Not a statement about your estate.