Security Advisory

CVE-2022-42469

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-04-11 16:07:17
Last updated 2024-10-22 20:47:05
Assigner fortinet
State PUBLISHED

Description

A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW Mode may allow an authenticated SSL-VPN user to bypass the policy via bookmarks in the web portal.