VULNERABILITY INTELLIGENCE

CVE-2023-27998

CVSS score5.3 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2023-09-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.

Weakness classification

  • psirt@fortinet.com: CWE-756
  • nvd@nist.gov: CWE-755

Primary references