VDB
BDU%3A2022-06189
BDU%3A2022-06189
PUBLISHED
CVSS 10 CRITICAL
Уязвимость веб-интерфейса управления операционных систем FortiOS и прокси-сервера для защиты от интернет-атак FortiProxy, позволяющая нарушителю повысить свои привилегии
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet Inc. | FortiOS, FortiProxy, FortiSwitch Manager |
Timeline
- Oct 10, 2022 CVE Published
- Sep 24, 2024 CVE Updated
References
- https://docs.fortinet.com/document/fortigate/7.0.7/fortios-release-notes/289806/resolved-issues url
- https://docs.fortinet.com/document/fortigate/7.2.2/fortios-release-notes/289806/resolved-issues url
- https://docs.fortinet.com/document/fortigate/6.0.0/hardening-your-fortigate/582009/system-administrator-best-practices url
- https://www.rapid7.com/blog/post/2022/10/07/cve-2022-40684-remote-authentication-bypass-vulnerability-in-fortinet-firewalls-web-proxies/ url
- http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url