PT-2023-2751 · Fortinet · Fortiadc

CVE-2023-27993 · Publicado 2023-03-09 · Atualizado 2023-05-10

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiADC versions 7.2.0 and prior to 7.1.1

Description A relative path traversal issue allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands. This issue is related to errors in processing relative paths to directories, which can be exploited to gain read, modify, or delete access to data.

Recommendations For Fortinet FortiADC versions 7.2.0 and prior to 7.1.1, consider restricting access to the CLI to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of crafted CLI commands that could be used to delete arbitrary directories.

Correção

Relative Path Traversal

Path traversal

Enumeração de Fraquezas

CWE-23

CWE-22

Identificadores relacionados

BDU:2023-02599

CVE-2023-27993

Produtos afetados

Fortiadc

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-27993 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-02599 · Nota de Segurança
• https://t.me/cibsecurity/63266 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-27993 · Aviso do Fabricante
• https://fortiguard.com/psirt/FG-IR-23-069 · Aviso do Fabricante
• https://t.me/cvenotify/49769 · Publicação no Telegram
• https://vuldb.com/ru/?id.227968 · Nota