CVE-2023-29184
LOWDescription
An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker to add SSH key files on the system silently via crafted CLI requests.
Is your site exposed to CVE-2023-29184?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| fortinet | fortiproxy |
| fortinet | fortiproxy |
| fortinet | fortios |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2023-29184? +
How severe is CVE-2023-29184? +
What products are affected by CVE-2023-29184? +
How do I check if I'm vulnerable to CVE-2023-29184? +
Related Vulnerabilities
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) …
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process …
Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process …
Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web …
A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and …
There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of …