Lucene search
PRIOn knowledge basePRION:CVE-2022-40684HistoryOct 18, 2022 - 2:15 p.m.
Authentication flaw
2022-10-1814:15:00
PRIOn knowledge base
www.prio-n.com
11
authentication flaw
cwe-288
fortinet fortios
fortiproxy
fortiswitchmanager
unauthenticated attacker
administrative interface
http
https requests
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortios | ge | 7.0.0 | |
| fortios | lt | 7.0.7 | |
| fortios | ge | 7.2.0 | |
| fortios | lt | 7.2.2 | |
| fortiproxy | eq | 7.2.0 | |
| fortiproxy | ge | 7.0.0 | |
| fortiproxy | lt | 7.0.7 | |
| fortiswitchmanager | eq | 7.0.0 | |
| fortiswitchmanager | eq | 7.2.0 |
Related
githubexploit
githubexploit
Exploit for Improper Authentication in Fortinet Fortiproxy
2022-10-14 01:07:01
Exploit for CVE-2022-40684
2022-10-14 09:57:22
Exploit for Improper Authentication in Fortinet Fortiproxy
2023-02-27 18:05:34
zdt
zdt
cvelist
cvelist
CVE-2022-40684
2022-10-18 00:00:00
wordfence
wordfence
Threat Advisory: CVE-2022-40684 Fortinet Appliance Auth bypass
2022-10-13 21:08:36
hivepro
hivepro
Vulnerability in Fortinet allows authentication bypass
2022-10-11 07:22:07
Threat Actors launch a campaign to exploit vulnerability in Fortinet
2022-10-28 08:52:38
cisa_kev
cisa_kev
Fortinet Multiple Products Authentication Bypass Vulnerability
2022-10-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)
2022-10-23 00:00:00
hackread
hackread
Critical Flaw Exploited to Bypass Fortinet Products and Compromise Orgs
2022-11-28 20:17:04
nuclei
nuclei
Fortinet - Authentication Bypass
2022-10-14 09:09:38
thn
thn
packetstorm
packetstorm
Fortinet FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass
2022-10-19 00:00:00
Fortinet 7.2.1 Authentication Bypass
2023-03-27 00:00:00
nvd
nvd
CVE-2022-40684
2022-10-18 14:15:09
nessus
nessus
Fortinet Fortigate Authentication Bypass (FG-IR-22-377)
2022-10-07 00:00:00
cve
cve
CVE-2022-40684
2022-10-18 14:15:09
fortinet
fortinet
Protect
2022-10-10 00:00:00
rapid7blog
rapid7blog
CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies
2022-10-07 16:24:42
Metasploit Weekly Wrap-Up
2022-10-21 17:31:54
metasploit
metasploit
Fortinet FortiOS, FortiProxy, and FortiSwitchManager authentication bypass.
2022-10-14 20:19:43
exploitdb
exploitdb
FortiOS, FortiProxy, FortiSwitchManager v7.2.1 - Authentication Bypass
2023-03-27 00:00:00
attackerkb
attackerkb
CVE-2022-40684
2022-10-18 00:00:00
qualysblog
qualysblog
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
ics
ics
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00