What is CVE-2023-25603?

CVE-2023-25603 is a medium-severity vulnerability in Fortinet Fortiadc, classified under Permissive Cross-domain Policy with Untrusted Domains. CVSS score: 5.4/10. Published 2023-11-14.

How severe is CVE-2023-25603?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Vulnerability in Fortinet Fortiadc

CVE-2023-25603

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive inf…

EPSS: 0.002 (41.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:X/RC:X.

Affected products

Fortinet Fortiadc — versions 7.1.0
Fortinet Fortiddos-f — versions 6.4.0, 6.3.0

Weakness classification (CWE)

CWE-942 — Permissive Cross-domain Policy with Untrusted Domains

References

https://fortiguard.com/psirt/FG-IR-22-518

Frequently asked questions

What is CVE-2023-25603?: CVE-2023-25603 is a medium-severity vulnerability in Fortinet Fortiadc, classified under Permissive Cross-domain Policy with Untrusted Domains. CVSS score: 5.4/10. Published 2023-11-14.
How severe is CVE-2023-25603?: Medium severity. CVSS v3 base score is 5.4 out of 10.