Protection Mechanism Failure in FortiWeb - CVE-2023-34984
Published: September 16, 2023
Vulnerability identifier: #VU80836
CSH Severity: Medium
CVSS v4: 4.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N]
CVE-ID: CVE-2023-34984
CWE-ID: CWE-693
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient implementation of security measures. An attacker can bypass implemented security restrictions against XSS and CSRF attacks.
Affected software
FortiWeb
How to mitigate CVE-2023-34984
Install updates from vendor's website.
FortiWeb - addressed in versions 7.0.7, 7.2.2