Skip to content
fr Sign in
8.6 High

CVE-2023-44252 ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0…

Description

** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values.

Affected products and versions

Product Affected versions Fixed in
FortiWAN 5.2 5.2.0 → 5.2.1 No fix stated
FortiWAN 5.1 5.1.1 → 5.1.2 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiWAN

The 5 CVEs of FortiWAN →
CVE-2021-26102 A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a… 9.8 Critical CVE-2021-26115 An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a… 7.6 High CVE-2023-44251 ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal')… 8.1 High CVE-2022-33869 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management… 8.0 High
Track this CVE