VYPR
← All advisories
Medium severity4.1NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026

CVE-2022-45859

CVE-2022-45859

Description

An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with system access to retrieve users' passwords.

Affected products

4
  • Fortinet/Fortinac F3 versions
    cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0
    • (no CPE)range: 9.4.0
  • Fortinet/Fortinac
    cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
    Range: >=8.7.0,<=9.1.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.