VYPR
← All advisories
Medium severity4.3NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026

CVE-2022-43950

CVE-2022-43950

Description

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.

Affected products

4
  • Fortinet/Fortinac F3 versions
    cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0
    • (no CPE)range: 9.4.0
  • Fortinet/Fortinac
    cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
    Range: >=8.7.0,<9.4.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.