An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/psirt/FG-IR-22-371 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2023-01-05T07:37:57.731Z
Updated: 2024-08-03T14:24:03.199Z
Reserved: 2022-11-23T14:57:05.612Z
Link: CVE-2022-45857
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-01-05T08:15:08.800
Modified: 2023-11-07T03:54:53.863
Link: CVE-2022-45857
Redhat
No data.