An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/psirt/FG-IR-18-292 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2023-09-01T11:43:03.878Z
Updated: 2024-08-03T03:07:50.194Z
Reserved: 2022-01-03T09:39:36.530Z
Link: CVE-2022-22305
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-09-01T12:15:08.363
Modified: 2023-11-07T03:43:51.810
Link: CVE-2022-22305
Redhat
No data.