An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/psirt/FG-IR-22-041 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2022-05-04T15:25:21
Updated: 2024-08-03T03:43:45.699Z
Reserved: 2022-01-19T00:00:00
Link: CVE-2022-23443
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-05-04T16:15:08.587
Modified: 2023-08-08T14:21:49.707
Link: CVE-2022-23443
Redhat
No data.