Lucene search
FortinetCVELIST:CVE-2022-23443HistoryMay 04, 2022 - 3:25 p.m.
CVE-2022-23443
2022-05-0415:25:21
fortinet
www.cve.org
4
fortinet
fortisoar
access control
unauthenticated
gateway api
http
get requests
security vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:T/RC:C
EPSS
0.003
Percentile
68.5%
An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
CNA Affected
[
{
"product": "Fortinet FortiSOAR",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiSOAR 7.0.2, 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.1, 6.4.0, 6.0.0, 5.x.x"
}
]
}
]References
Related
cve
cve
CVE-2022-23443
2022-05-04 16:15:08
fortinet
fortinet
FortiSOAR - Improper access control on gateway API
2022-05-03 00:00:00
nvd
nvd
CVE-2022-23443
2022-05-04 16:15:08
prion
prion
Improper access control
2022-05-04 16:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:T/RC:C
EPSS
0.003
Percentile
68.5%
Related for CVELIST:CVE-2022-23443