CVE-2023-42787

MediumCVSS 6.5/10Last modified Aug 12, 2026

Description

A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-602

Affected software

Vendor	Product	Versions
Fortinet	FortiAnalyzer	7.4.0; >= 7.2.0, <= 7.2.3; >= 7.0.0, <= 7.0.9; >= 6.4.0, <= 6.4.15; >= 6.2.0, <= 6.2.13
Fortinet	FortiManager	7.4.0; >= 7.2.0, <= 7.2.3; >= 7.0.0, <= 7.0.9; >= 6.4.0, <= 6.4.15; >= 6.2.0, <= 6.2.13
Fortinet	FortiAnalyzer-BigData	>= 7.2.0, <= 7.2.5; >= 7.0.1, <= 7.0.6; >= 6.4.5, <= 6.4.7; 6.2.5
Fortinet	FortiAnalyzer Cloud	>= 7.0.1, <= 7.0.9

References

https://fortiguard.com/psirt/FG-IR-23-187Vendor Advisory
https://fortiguard.com/psirt/FG-IR-23-187Vendor Advisory
https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8frExploit, Third Party Advisory

Timeline

Published: Oct 10, 2023
Last modified: Aug 12, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-427886.7An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & Forti CVE-2023-427899.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, Fort CVE-2023-42797.5This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker CVE-2023-427908.1A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.CVE-2023-427918.8A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 an CVE-2023-427926.5Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some CVE-2023-427939.8In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible CVE-2023-427945.9Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.8 CVE-2023-427955.3Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11 CVE-2023-427968.8A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V0 CVE-2023-427977.2A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V0 CVE-2023-427989.1AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can l