VYPR
← All advisories
High severity7.8NVD Advisory· Published Nov 2, 2022· Updated Jun 17, 2026

CVE-2022-26119

CVE-2022-26119

Description

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.

Affected products

12
  • Fortinet/FortiSIEMllm-fuzzy12 versions
    <6.5.0+ 11 more
    • (no CPE)range: <6.5.0
    • (no CPE)range: FortiSIEM 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 5.4.0, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.2, 5.2.1, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.1, 5.0.0
    • cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*range: >=5.1.0,<=5.1.3
    • cpe:2.3:a:fortinet:fortisiem:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.