Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-38375

An improper authorization vulnerability [CWE-285]  in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.

Published

2023-02-16T19:15:12.797

Last Modified

2024-11-21T07:16:20.970

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.1 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-285
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortinac < 9.2.7 Yes
Application fortinet fortinac < 9.4.2 Yes
Application fortinet fortinac-f < 7.2.0 Yes
References