Lucene search
HistoryAug 03, 2022 - 2:15 p.m.
CVE-2022-23442
improper access control
fortios
vulnerability
vdoms
cli commands
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
22.7%
An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands.
Affected configurations
Node
fortinetfortiosRange6.2.0–6.2.11
ORfortinetfortiosRange6.4.0–6.4.8
ORfortinetfortiosRange7.0.0–7.0.5
References
Related
fortinet
fortinet
Protect
2022-08-02 00:00:00
prion
prion
Improper access control
2022-08-03 14:15:00
cvelist
cvelist
CVE-2022-23442
2022-08-03 13:20:27
nessus
nessus
Fortinet Fortigate -- Inter-VDOM information leaking (FG-IR-22-036)
2022-08-02 00:00:00
cve
cve
CVE-2022-23442
2022-08-03 14:15:08
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
22.7%
Related for NVD:CVE-2022-23442