{"id":"CVE-2023-45581","revision":"da00fe9e89b34976a9a2d2b5d7eb87c9","records":[{"revision":"da00fe9e89b34976a9a2d2b5d7eb87c9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-45581","aliases":[],"title":"An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0 through 7.0.4, FortiClientEMS 6.4 all versions, FortiClientEMS …","description":"An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0 through 7.0.4, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions allows an\u00A0Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.","state":0,"publishedAt":"2024-02-15T13:59:23.728+00:00","modifiedAt":"2026-10-22T13:48:34.393+00:00","affected":[{"ecosystem":"Vendor product","name":"FortiClientEMS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Fortinet\",\n                    \"product\": \"FortiClientEMS\",\n                    \"cpes\": [\n                        \"cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.9:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.8:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.7:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.4:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.3:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.2:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.1:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.0:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.9:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.8:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.7:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.6:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.4:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.3:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.02.02:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:*\"\n                    ],\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"7.2.0\",\n                            \"lessThanOrEqual\": \"7.2.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"7.0.6\",\n                            \"lessThanOrEqual\": \"7.0.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"7.0.0\",\n                            \"lessThanOrEqual\": \"7.0.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"6.4.7\",\n                            \"lessThanOrEqual\": \"6.4.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"6.4.0\",\n                            \"lessThanOrEqual\": \"6.4.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"6.2.6\",\n                            \"lessThanOrEqual\": \"6.2.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"6.2.3\",\n                            \"lessThanOrEqual\": \"6.2.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"06.02.00\",\n                            \"lessThanOrEqual\": \"06.02.02\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:U","score":7.9,"severity":"HIGH"}],"references":["https://fortiguard.com/psirt/FG-IR-23-357"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-45581","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-45581","identifiers":["CVE-2023-45581"]},"retained":false,"historicalAffected":[]}],"coverage":[]}