CVE-2023-27998

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-756CWE-755

Affected software

No affected versions have been published.

Timeline

Published
Sep 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-279997.8An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 through 7.1.1 may allowCVE-2023-28004.7Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.CVE-2023-280007.8An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC CLI 7.1.0, 7.0.0 through 7.0.3, 6.2.CVE-2023-280019.8An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or cCVE-2023-280026.7An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versioCVE-2023-280038.8A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijackedCVE-2023-280049.8A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could result in denial of sCVE-2023-280056.8A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical aCVE-2023-280067.8The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure.CVE-2023-280088.1HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remotCVE-2023-280098.1HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could expCVE-2023-28015.3Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data source
CVE-2023-27998: Medium severity, CVSS 5.3 | Vulnix