VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 1, 2023· Updated Sep 27, 2024

CVE-2022-22305

CVE-2022-22305

Description

An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.

Affected products

7
  • Fortinet/Fortianalyzerllm-fuzzy2 versions
    <=7.0.2, <=6.4.7+ 1 more
    • (no CPE)range: <=7.0.2, <=6.4.7
    • (no CPE)range: 7.0.0
  • Fortinet/Fortimanagerllm-fuzzy2 versions
    <=7.0.1, <=6.4.6+ 1 more
    • (no CPE)range: <=7.0.1, <=6.4.6
    • (no CPE)range: 7.0.0
  • Fortinet/Fortisandboxllm-fuzzy2 versions
    4.0.x, 3.2.x, 3.1.x+ 1 more
    • (no CPE)range: 4.0.x, 3.2.x, 3.1.x
    • (no CPE)range: 4.0.0
  • Fortinet/Fortiosllm-fuzzy
    Range: 6.2.x, 6.0.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.