CVE-2023-40720 Auth bypass in FortiVoice

Medium 6.7 Published 14 May 2024 Updated 2 Aug 2024

Authenticated attackers can bypass authorization to read other users' SIP configurations via crafted requests in FortiVoice Enterprise.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-40720?

CVE-2023-40720 is a medium-severity authentication bypass vulnerability in Fortinet FortiVoice, published on 14 May 2024. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to read the SIP configuration of other users via crafted HTTP or HTTPS requests.

Weakness: CWE-639

Which versions are affected by CVE-2023-40720?

It affects 1 product.

Products include Fortinet Fortivoice.

How do I fix CVE-2023-40720?

No fix has been published for CVE-2023-40720 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2023-40720 being exploited?

There is no known exploitation of CVE-2023-40720 in the wild and no public exploit code.

Sources

Also known as GHSA-wr9w-6wcp-7m3p.