Beveiligingsadvies

CVE-2022-40684

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-18 00:00:00
Laatst bijgewerkt 2026-08-06 03:55:36
Toegewezen door fortinet
CVSS-score 9.8
Status PUBLISHED

Beschrijving

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.