✕
Request a Demo
Rewterz
Rewterz Threat Alert – Latest Update Regarding JSOutProx Malware and Its Impact on Financial Institutions – Active IOCs
October 6, 2023
Rewterz
Rewterz Threat Alert -Tofsee Malware – Active IOCs
October 9, 2023

Rewterz Threat Advisory – CVE-2023-25606 – Fortinet FortiAnalyzer and FortiManager Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-25606

Fortinet FortiAnalyzer and FortiManager could allow a remote authenticated attacker to traverse directories on the system, caused by improper validation of user requests. An attacker could send a specially-crafted URL request containing “dot dot” sequences (/../) to view arbitrary files on the system.

Impact

  • Information Theft

Indicators Of Compromise

CVE

  • CVE-2023-25606

Affected Vendors

Fortinet

Affected Products

  • Fortinet FortiManager 7.0.0
  • Fortinet FortiAnalyzer 7.0.0
  • Fortinet FortiManager 6.4.0
  • Fortinet FortiAnalyzer 7.2.0

Remediation

Refer to FortiGuard Advisory for patch, upgrade or suggested workaround information.

FortiGuard Advisory