An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/psirt/FG-IR-21-165 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2022-03-02T10:00:12
Updated: 2024-08-03T03:07:50.277Z
Reserved: 2022-01-03T00:00:00
Link: CVE-2022-22303
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-03-02T10:15:08.037
Modified: 2022-03-10T15:21:23.030
Link: CVE-2022-22303
Redhat
No data.