CVE-2023-45586

5.0MEDIUM

An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.12 & FortiProx

公開日: 5/14/2024更新日: 11/21/2024
NVDで表示MITREで表示

説明

An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.12 & FortiProxy SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.13 allows an authenticated VPN user to send (but not receive) packets spoofing the IP of another user via crafted network packets.

AI分析AIによる分析

影響を受ける製品

fortinetfortiproxy
fortinetfortiproxy
fortinetfortiproxy
fortinetfortiproxy
7.4.0
fortinetfortiproxy
7.4.1
fortinetfortios
fortinetfortios
fortinetfortios
fortinetfortios
fortinetfortios
7.4.0
fortinetfortios
7.4.1

参照