CVE-2023-22636

—

CVSS 3.1

3.3 low

EPSS

<1%p6

Published

Feb 27, 2023 (Feb 27, 2023)

Modified

Jun 17, 2026

Description

An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker to access confidential configuration files via a crafted http request.

Vendors: fortinet
Products: fortiweb
Weakness: CWE-285
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.