VYPR
← All advisories
High severity7.8NVD Advisory· Published Nov 2, 2022· Updated Jun 17, 2026

CVE-2022-26119

CVE-2022-26119

Description

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.

Affected products

12
  • Fortinet/FortiSIEM12 versions
    cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*range: >=5.1.0,<=5.1.3
    • cpe:2.3:a:fortinet:fortisiem:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*
    • (no CPE)range: <6.5.0
    • (no CPE)range: FortiSIEM 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 5.4.0, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.2, 5.2.1, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.1, 5.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.