CVE-2023-26203

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://fortiguard.com/psirt/FG-IR-22-520	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac-f:7.2.0:::::::*

History

10 May 2023, 20:44

Type	Values Removed	Values Added
CPE		cpe:2.3:a:fortinet:fortinac-f:7.2.0:::::::* cpe:2.3:a:fortinet:fortinac::::::::
CWE		CWE-798
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8
First Time		Fortinet fortinac Fortinet fortinac-f Fortinet
References	~~(MISC) https://fortiguard.com/psirt/FG-IR-22-520 -~~	(MISC) https://fortiguard.com/psirt/FG-IR-22-520 - Vendor Advisory

03 May 2023, 22:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-05-03 22:15

Updated : 2023-12-10 15:01

NVD link : CVE-2023-26203

Mitre link : CVE-2023-26203

CVE.ORG link : CVE-2023-26203

JSON object : View

Products Affected

fortinet

fortinac-f
fortinac

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2023-26203", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2023-05-03T22:15:18.357", "references": [{"url": "https://fortiguard.com/psirt/FG-IR-22-520", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}, {"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands."}], "lastModified": "2023-11-07T04:09:29.740", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2638973E-2258-4D0F-AF28-36D63652141D", "versionEndIncluding": "9.2.7", "versionStartIncluding": "8.7.0"}, {"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2DF0CAE-9209-4DEC-8197-11F9D34D7C8A", "versionEndExcluding": "9.4.3", "versionStartIncluding": "9.4.0"}, {"criteria": "cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77DE647F-0252-42E2-8BDD-C98DC899C613"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}