Lucene search
HistoryJun 13, 2023 - 9:15 a.m.
CVE-2022-43949
broken cryptographic algorithm
fortisiem
brute force attacks
outdated hashing methods
cve-2022-43949
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
47.7%
A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.
Affected configurations
Node
fortinetfortisiemRange5.3.0–5.3.3
ORfortinetfortisiemRange6.3.0–6.3.3
ORfortinetfortisiemRange6.6.0–6.6.3
ORfortinetfortisiemMatch5.4.0
ORfortinetfortisiemMatch6.1.0
ORfortinetfortisiemMatch6.1.1
ORfortinetfortisiemMatch6.1.2
ORfortinetfortisiemMatch6.2.0
ORfortinetfortisiemMatch6.2.1
ORfortinetfortisiemMatch6.4.0
ORfortinetfortisiemMatch6.4.1
ORfortinetfortisiemMatch6.4.2
ORfortinetfortisiemMatch6.5.0
ORfortinetfortisiemMatch6.5.1
ORfortinetfortisiemMatch6.7.0
ORfortinetfortisiemMatch6.7.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fortinet | fortisiem | * | cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:* |
| fortinet | fortisiem | 5.4.0 | cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:* |
| fortinet | fortisiem | 6.1.0 | cpe:2.3:a:fortinet:fortisiem:6.1.0:*:*:*:*:*:*:* |
| fortinet | fortisiem | 6.1.1 | cpe:2.3:a:fortinet:fortisiem:6.1.1:*:*:*:*:*:*:* |
| fortinet | fortisiem | 6.1.2 | cpe:2.3:a:fortinet:fortisiem:6.1.2:*:*:*:*:*:*:* |
| fortinet | fortisiem | 6.2.0 | cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:* |
| fortinet | fortisiem | 6.2.1 | cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:* |
| fortinet | fortisiem | 6.4.0 | cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:* |
| fortinet | fortisiem | 6.4.1 | cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:* |
| fortinet | fortisiem | 6.4.2 | cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:* |
References
Related
cve
cve
CVE-2022-43949
2023-06-13 09:15:16
prion
prion
Design/Logic Flaw
2023-06-13 09:15:00
cvelist
cvelist
CVE-2022-43949
2023-06-13 08:41:43
fortinet
fortinet
FortiSIEM - Use of a Broken or Risky Cryptographic Algorithm
2023-06-12 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
47.7%
Related for NVD:CVE-2022-43949