Vulnetix
Try Vulnetix Request Demo
CVE-2023-22642 PUBLISHED CVSS 6.800000190734863 MEDIUM

An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the remote FortiGuard server hosting outbreakalert ressources.

EPSS 0.14% · 33.4th percentile

Risk Scores

CVSS v3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
EPSS Score
0.14%
33.4th percentile

Affected Products

VendorProductVersions
FortinetFortiManager6.4.8, 6.4.0, 7.2.0
fortinetfortimanager7.2.0, 6.4.8, 7.0.0
FortinetFortiAnalyzer7.2.0, 7.0.0, 6.4.8
fortinetfortianalyzer7.2.0, 7.0.0, 6.4.8

Timeline

References

…and 3 more

Open in Interactive Console →