Lucene search
FortiGuard LabsFG-IR-22-377HistoryOct 10, 2022 - 12:00 a.m.
Protect
2022-10-1000:00:00
FortiGuard Labs
www.fortiguard.com
172
authentication bypass
fortios
fortiproxy
fortiswitchmanager
vulnerability
http
https
unauthenticated attacker
0.974 High
EPSS
Percentile
99.9%
An authentication bypass using an alternate path or channel vulnerability [CWE-288] in FortiOS, FortiProxy and FortiSwitchManager may allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortiproxy | eq | 7.2.0 | |
| fortiproxy | eq | 7.0.6 | |
| fortiproxy | eq | 7.0.5 | |
| fortiproxy | eq | 7.0.4 | |
| fortiproxy | eq | 7.0.3 | |
| fortiproxy | eq | 7.0.2 | |
| fortiproxy | eq | 7.0.1 | |
| fortiproxy | eq | 7.0.0 | |
| fortiswitchmanager | eq | 7.2.0 | |
| fortiswitchmanager | eq | 7.0.0 |
Related
wordfence
wordfence
Threat Advisory: CVE-2022-40684 Fortinet Appliance Auth bypass
2022-10-13 21:08:36
githubexploit
githubexploit
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-14 01:07:01
Exploit for CVE-2022-40684
2022-10-14 09:57:22
Exploit for Improper Authentication in Fortinet Fortiproxy
2023-02-27 18:05:34
zdt
zdt
cvelist
cvelist
CVE-2022-40684
2022-10-18 00:00:00
hivepro
hivepro
Vulnerability in Fortinet allows authentication bypass
2022-10-11 07:22:07
Threat Actors launch a campaign to exploit vulnerability in Fortinet
2022-10-28 08:52:38
cisa_kev
cisa_kev
Fortinet Multiple Products Authentication Bypass Vulnerability
2022-10-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)
2022-10-23 00:00:00
hackread
hackread
Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs
2022-11-28 20:17:04
nuclei
nuclei
Fortinet - Authentication Bypass
2022-10-14 09:09:38
thn
thn
packetstorm
packetstorm
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass
2022-10-19 00:00:00
Fortinet 7.2.1 Authentication Bypass
2023-03-27 00:00:00
nvd
nvd
CVE-2022-40684
2022-10-18 14:15:09
nessus
nessus
Fortinet Fortigate Authentication Bypass (FG-IR-22-377)
2022-10-07 00:00:00
cve
cve
CVE-2022-40684
2022-10-18 14:15:09
rapid7blog
rapid7blog
CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies
2022-10-07 16:24:42
Metasploit Weekly Wrap-Up
2022-10-21 17:31:54
metasploit
metasploit
Fortinet FortiOS, FortiProxy, and FortiSwitchManager authentication bypass.
2022-10-14 20:19:43
prion
prion
Authentication flaw
2022-10-18 14:15:00
exploitdb
exploitdb
FortiOS, FortiProxy, FortiSwitchManager v7.2.1 - Authentication Bypass
2023-03-27 00:00:00
attackerkb
attackerkb
CVE-2022-40684
2022-10-18 00:00:00
qualysblog
qualysblog
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
ics
ics
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00