CVE Vulnerabilities

CVE-2023-29184

Incomplete Cleanup

Published: Jun 10, 2025 | Modified: Jul 24, 2025
CVSS 3.x
2.3
LOW
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker to add SSH key files on the system silently via crafted CLI requests.

Weakness

The product does not properly “clean up” and remove temporary or supporting resources after they have been used.

Affected Software

Name Vendor Start Version End Version
Fortiproxy Fortinet 1.1.0 (including) 7.0.9 (excluding)
Fortiproxy Fortinet 7.2.0 (including) 7.2.3 (excluding)

Potential Mitigations

References