2.8
Low
CVE-2022-22303 An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager…
Description
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiManager | Versions not published |
Other CVEs of Fortinet FortiManager
The 7 CVEs of Fortinet FortiManager →
CVE-2021-36192
An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below,…
5.2
Medium
CVE-2021-26107
An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated…
6.3
Medium
CVE-2021-24017
An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign…
5.4
Medium
CVE-2021-24016
An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and…
3.7
Low