CVE-2023-42782 (published 2023-10-10T16:50:26.310Z)
A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3 allows a remote unauthenticated attacker to send messages to the syslog server of FortiAnalyzer via the knoweldge of an authorized device serial number.
Affected products: Vendor: Fortinet
Product: FortiAnalyzer
Versions: 7.4.0, 7.2.0, 7.0.0, 6.4.0, 6.2.0