CVE-2023-48783

Description

An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and below, version 7.0.6 and below, version 6.0.14 and below, version 5.3.8 and below may allow a remote authenticated user with at least read-only permissions to access to other organization endpoints via crafted GET requests.

Reserved 2023-11-19 | Published 2024-01-10 | Updated 2024-08-02 | Assigner fortinet

Problem types

Improper access control

Product status

Default status
unaffected

7.2.0
affected

7.0.0
affected

6.0.0
affected

5.3.0
affected

References

fortiguard.com/psirt/FG-IR-23-408

cve.org (CVE-2023-48783)

nvd.nist.gov (CVE-2023-48783)

Download JSON