Lucene search
FortiGuard LabsFG-IR-21-255HistoryMar 01, 2022 - 12:00 a.m.
FortiAnalyzer, FortiManager - bypass of client-side password change policy enforcement
2022-03-0100:00:00
FortiGuard Labs
www.fortiguard.com
13
fortianalyzer
fortimanager
insufficient permissions vulnerability
cwe-280
password change policy
EPSS
0.001
Percentile
42.8%
An improper handling of insufficient permissions or privileges vulnerability [CWE-280] in FortiAnalyzer and FortiManager may allow an authenticated attacker to bypass the device policy and force the password-change action for its user.
Related
cvelist
cvelist
CVE-2022-22300
2022-03-01 18:25:16
cnvd
cnvd
prion
prion
Input validation
2022-03-01 19:15:00
cve
cve
CVE-2022-22300
2022-03-01 19:15:08
nvd
nvd
CVE-2022-22300
2022-03-01 19:15:08