CVE-2023-33304

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials.
References
Link Resource
https://fortiguard.com/psirt/FG-IR-23-108 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*
cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*
cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:windows:*:*

History

20 Nov 2023, 18:19

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-14 18:15

Updated : 2024-02-05 00:22


NVD link : CVE-2023-33304

Mitre link : CVE-2023-33304

CVE.ORG link : CVE-2023-33304


JSON object : View

Products Affected

fortinet

  • forticlient
CWE
CWE-798

Use of Hard-coded Credentials