PT-2023-7268 · Microsoft+1 · Windows+1

Published 2023-11-14 · Updated 2023-11-21 · CVE-2023-41676

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FortiSIEM versions 6.7.5 and earlier FortiSIEM version 7.0.0

Description The issue is related to insufficient protection of sensitive data, which may allow an unauthorized actor to obtain sensitive information. An attacker with access to Windows agent logs may be able to obtain the Windows agent password by searching through the logs. This could potentially allow a remote attacker to gain unauthorized access to protected information.

Recommendations For FortiSIEM versions 6.7.5 and earlier, update to a version that contains a fix for this issue. For FortiSIEM version 7.0.0, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to Windows agent logs to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Information Disclosure

Weakness Enumeration

CWE-522

CWE-200

Related Identifiers

BDU:2023-08296

CVE-2023-41676

Affected Products

Fortisiem

Windows

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-41676 · Security Note
• https://bdu.fstec.ru/vul/2023-08296 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41676 · Vendor Advisory
• https://fortiguard.com/psirt/FG-IR-23-290 · Vendor Advisory
• https://vuldb.com/ru/?id.245184 · Note
• https://github.com/advisories/GHSA-c5g2-f738-9q44 · Note
• https://twitter.com/CVEnew/status/1724491737203089606 · Twitter Post