{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-42787","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","state":"PUBLISHED","assignerShortName":"fortinet","dateReserved":"2023-09-14T08:37:38.657Z","datePublished":"2023-10-10T16:48:46.963Z","dateUpdated":"2026-08-12T11:52:51.984Z"},"containers":{"cna":{"affected":[{"vendor":"Fortinet","product":"FortiAnalyzer","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"versionType":"semver","version":"7.2.0","lessThanOrEqual":"7.2.3","status":"affected"},{"versionType":"semver","version":"7.0.0","lessThanOrEqual":"7.0.9","status":"affected"},{"versionType":"semver","version":"6.4.0","lessThanOrEqual":"6.4.15","status":"affected"},{"versionType":"semver","version":"6.2.0","lessThanOrEqual":"6.2.13","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"versionType":"semver","version":"7.2.0","lessThanOrEqual":"7.2.3","status":"affected"},{"versionType":"semver","version":"7.0.0","lessThanOrEqual":"7.0.9","status":"affected"},{"versionType":"semver","version":"6.4.0","lessThanOrEqual":"6.4.15","status":"affected"},{"versionType":"semver","version":"6.2.0","lessThanOrEqual":"6.2.13","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer-BigData","cpes":["cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.2.5:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","versions":[{"versionType":"semver","version":"7.2.0","lessThanOrEqual":"7.2.5","status":"affected"},{"versionType":"semver","version":"7.0.1","lessThanOrEqual":"7.0.6","status":"affected"},{"versionType":"semver","version":"6.4.5","lessThanOrEqual":"6.4.7","status":"affected"},{"version":"6.2.5","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","versions":[{"versionType":"semver","version":"7.0.1","lessThanOrEqual":"7.0.9","status":"affected"}]}],"descriptions":[{"lang":"en","value":"A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution."}],"providerMetadata":{"orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","shortName":"fortinet","dateUpdated":"2026-08-12T11:52:51.984Z"},"problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-602","description":"Improper access control","type":"CWE"}]}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:X"}}],"solutions":[{"lang":"en","value":"Upgrade to FortiAnalyzer version 7.4.1 or above\nUpgrade to FortiAnalyzer version 7.2.4 or above\nUpgrade to FortiAnalyzer version 7.0.10 or above\nUpgrade to FortiManager version 7.4.1 or above\nUpgrade to FortiManager version 7.2.4 or above\nUpgrade to FortiManager version 7.0.10 or above\nUpgrade to FortiAnalyzer-BigData version 7.4.0 or above\nUpgrade to FortiAnalyzer-BigData version 7.2.6 or above\nUpgrade to FortiAnalyzer Cloud version 7.0.10 or above"}],"references":[{"name":"https://fortiguard.com/psirt/FG-IR-23-187","url":"https://fortiguard.com/psirt/FG-IR-23-187"}]},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T19:30:24.511Z"},"title":"CVE Program Container","references":[{"name":"https://fortiguard.com/psirt/FG-IR-23-187","url":"https://fortiguard.com/psirt/FG-IR-23-187","tags":["x_transferred"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr","tags":["x_transferred"]}]}]}}