CVE-2023-27998
published 2023-09-13CVE-2023-27998: A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated…
PriorityP429medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.40%
32.1th percentile
A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortipresence | — | — |
| fortinet | fortipresence | — | — |
| fortinet | fortipresence | — | — |
| fortinet | fortipresence | — | — |
| fortinet | fortipresence | — | — |
| fortinet | fortipresence | — | — |
| fortinet | fortipresence | 1.1.0 – 1.1.1 | — |
| fortinet | fortipresence | 1.2.0 – 1.2.1 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7pp3-x5h4-fx5v: A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1
ghsa_unreviewed·2023-09-13
CVE-2023-27998 [MEDIUM] CWE-755 GHSA-7pp3-x5h4-fx5v: A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1
A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.
Fortinet
A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1...
vendor_fortinet·2023-09-13·CVSS 5.3
CVE-2023-27998 [MEDIUM] CWE-755 A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1...
FG-IR-22-288: A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1...
A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.
CVEs: CVE-2023-27998
CWEs: CWE-755, CWE-756
CVSS: 5.3 (medium)
Affected products: FortiPresence
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-09-13
Published