CVE-2023-45581: An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0…

High severity · published Feb 15, 2024

CVE-2023-45581

An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0…

7.2

CVSS

0.9%

EPSS

On KEV

Description

An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0 through 7.0.4, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.9% · higher than 59% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

FortiClientEMS · Fortinet

7.2.0 through 7.2.2; 7.0.6 through 7.0.10; 7.0.0 through 7.0.4; 6.4.7 through 6.4.9; 6.4.0 through 6.4.4; 6.2.6 through 6.2.9; +2 more · source: vendor

Forticlient Enterprise Management Server · Fortinet

before 7.0.10; 7.2.0 through 7.2.2 · source: NVD, CISA

Affected product

FortiClientEMS

Fortinet

All FortiClientEMS CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-45581

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-45581

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-23-357