Security Advisory

CVE-2023-42782

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-10-10 16:50:26
Last updated 2024-09-18 20:50:44
Assigner fortinet
CVSS score 5.0
State PUBLISHED

Description

A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3 allows a remote unauthenticated attacker to send messages to the syslog server of FortiAnalyzer via the knoweldge of an authorized device serial number.