CVE-2022-40678

An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow a local attacker with database access to recover user passwords.
References
Link Resource
https://fortiguard.com/psirt/FG-IR-22-265 Patch Vendor Advisory
https://fortiguard.com/psirt/FG-IR-22-265 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*

History

21 Nov 2024, 07:21

Type Values Removed Values Added
References () https://fortiguard.com/psirt/FG-IR-22-265 - Patch, Vendor Advisory () https://fortiguard.com/psirt/FG-IR-22-265 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : 7.4

Information

Published : 2023-02-16 19:15

Updated : 2024-11-21 07:21


NVD link : CVE-2022-40678

Mitre link : CVE-2022-40678

CVE.ORG link : CVE-2022-40678


JSON object : View

Products Affected

fortinet

  • fortinac
CWE
CWE-522

Insufficiently Protected Credentials