CVEvulnerability

CVE-2023-27998

5.3 MEDIUM Published 2023-09-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-755, CWE-756

Description

A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.

Affected configurations

• fortinet fortipresence 1.0.0 • fortinet fortipresence 1.1.0 • fortinet fortipresence 1.1.1 • fortinet fortipresence 1.2.0 • fortinet fortipresence 1.2.1

Related

Weakness · CWE (2)

  • CWE-755 Improper Handling of Exceptional Conditions weakness
  • CWE-756 Missing Custom Error Page weakness

Referenced by CWE · observed example (1)

  • CWE-756 Missing Custom Error Page weakness

References