CVE-2023-50176

HighCVSS 8.8/10Last modified Aug 24, 2026

Description

A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-384

Affected software

Vendor	Product	Versions
Fortinet	FortiOS	>= 7.4.0, <= 7.4.3; >= 7.2.0, <= 7.2.7; >= 7.0.0, <= 7.0.13

References

https://fortiguard.fortinet.com/psirt/FG-IR-23-475Vendor Advisory

Timeline

Published: Nov 12, 2024
Last modified: Aug 24, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-501787.4An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 a CVE-2023-501795.9An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow CVE-2023-50189.8A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part CVE-2023-501805.5An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, v CVE-2023-501816.5An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only aut CVE-2023-501868.8GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e CVE-2023-501877.8Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers t CVE-2023-501887.8Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attack CVE-2023-501897.8Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e CVE-2023-50199.8A vulnerability classified as critical was found in Tongda OA. This vulnerability affects unknown code of the file general/hr/manage/staff_r CVE-2023-501907.8Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers CVE-2023-501917.8Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e