VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 18, 2022· Updated Oct 25, 2024

CVE-2022-29060

CVE-2022-29060

Description

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retrieve the key from one device to sign JWT tokens for any device.

Affected products

2
  • Fortinet/Fortiddos Fllm-fuzzy2 versions
    >=5.1.0 <=5.5.1+ 1 more
    • (no CPE)range: >=5.1.0 <=5.5.1
    • (no CPE)range: FortiDDoS 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.