Critical severity9.8NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026
CVE-2022-41331
CVE-2022-41331
Description
A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests.
Affected products
3<1.2.1+ 1 more
- (no CPE)range: <1.2.1
- (no CPE)range: 1.2.0
Patches
Vulnerability mechanics
References
1- fortiguard.com/psirt/FG-IR-22-355nvdVendor Advisory
News mentions
0No linked articles in our index yet.