CVE-2023-41679 Information

Description

An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2 7.0.0 through 7.0.7 6.4.0 through 6.4.11 6.2 all versions 6.0 all versions may allow a remote and authenticated attacker with at least \device management\ permission on his profile and belonging to a specific ADOM to add and delete CLI script on other ADOMs

Reference

https://fortiguard.com/psirt/FG-IR-23-062