CVE-2022-26117 - OpenCVE

An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Fortinet	Fortinac

Configuration 1 [-]

OR	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac:8.3.7:::::::*
	cpe:2.3:a:fortinet:fortinac:8.5.4:::::::*
	cpe:2.3:a:fortinet:fortinac:8.6.0:::::::*

No data.

References

Link	Providers
https://fortiguard.com/psirt/FG-IR-22-058
https://github.com/orangecertcc/security-research/security/advisories/GHSA-r259-5p5p-2q47

History

No history.

MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2022-07-18T00:00:00

Updated: 2024-08-03T04:56:37.812Z

Reserved: 2022-02-25T00:00:00

Link: CVE-2022-26117

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2022-07-18T18:15:09.017

Modified: 2023-02-16T19:28:48.090

Link: CVE-2022-26117

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-26117", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "assignerShortName": "fortinet", "dateUpdated": "2024-08-03T04:56:37.812Z", "dateReserved": "2022-02-25T00:00:00", "datePublished": "2022-07-18T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2023-01-30T00:00:00"}, "descriptions": [{"lang": "en", "value": "An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI."}], "affected": [{"vendor": "Fortinet", "product": "Fortinet FortiNAC", "versions": [{"version": "FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below.", "status": "affected"}]}], "references": [{"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-r259-5p5p-2q47"}, {"url": "https://fortiguard.com/psirt/FG-IR-22-058"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "exploitCodeMaturity": "PROOF_OF_CONCEPT", "remediationLevel": "NOT_DEFINED", "reportConfidence": "REASONABLE", "baseScore": 8.8, "temporalScore": 8, "baseSeverity": "HIGH", "temporalSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "Execute unauthorized code or commands"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T04:56:37.812Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-r259-5p5p-2q47", "tags": ["x_transferred"]}, {"url": "https://fortiguard.com/psirt/FG-IR-22-058", "tags": ["x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B25CF57-8771-436D-8B57-EE67D9F47570", "versionEndIncluding": "8.5.2", "versionStartIncluding": "8.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "81E4D361-D753-4931-83A7-9085A1B74425", "versionEndIncluding": "8.6.5", "versionStartIncluding": "8.6.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "3BD32B25-76B4-4D6E-BB5C-065070297058", "versionEndIncluding": "8.7.6", "versionStartIncluding": "8.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "46929BE3-0396-4B8A-9889-9F6CA73FAD4E", "versionEndIncluding": "8.8.11", "versionStartIncluding": "8.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D6DF60A-302A-4602-9DA3-282177BB31DC", "versionEndExcluding": "9.1.6", "versionStartIncluding": "9.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "6784AAA4-8FE1-4AEA-A9F1-8489FCF78301", "versionEndExcluding": "9.2.4", "versionStartIncluding": "9.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "952F266E-0E48-4D69-81E0-9F813B60AC3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:8.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "374069A0-1A0D-45B7-B59D-DA3AA3855444", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:8.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11F0FBF-985B-4053-9B16-AA7173BCCC21", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI."}, {"lang": "es", "value": "Una vulnerabilidad de contrase\u00f1a vac\u00eda en el archivo de configuraci\u00f3n [CWE-258] en FortiNAC versiones 8.3.7 y anteriores, 8.5.2 y anteriores, 8.5.4, 8.6.0, 8.6.5 y anteriores, 8.7.6 y anteriores, 8.8.11 y anteriores, 9.1.5 y anteriores, 9.2.3 y anteriores puede permitir a un atacante autenticado acceder a las bases de datos MySQL por medio de la CLI"}], "id": "CVE-2022-26117", "lastModified": "2023-02-16T19:28:48.090", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "psirt@fortinet.com", "type": "Secondary"}]}, "published": "2022-07-18T18:15:09.017", "references": [{"source": "psirt@fortinet.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-22-058"}, {"source": "psirt@fortinet.com", "tags": ["Third Party Advisory"], "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-r259-5p5p-2q47"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-521"}], "source": "nvd@nist.gov", "type": "Primary"}]}