CVE-2022-22300
01.03.2022, 19:15
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through 6.0.11, FortiAnalyzer version 6.2.0 through 6.2.9, FortiAnalyzer version 6.4.0 through 6.4.7, FortiAnalyzer version 7.0.0 through 7 .0.2, FortiManager version 5.6.0 through 5.6.11, FortiManager version 6.0.0 through 6.0.11, FortiManager version 6.2.0 through 6.2.9, FortiManager version 6.4.0 through 6.4.7, FortiManager version 7.0.0 through 7.0.2 allows attacker to bypass the device policy and force the password-change action for its user.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortianalyzer | 5.6.0 ≤ 𝑥 ≤ 5.6.11 |
| fortinet | fortianalyzer | 6.0.0 ≤ 𝑥 ≤ 6.0.11 |
| fortinet | fortianalyzer | 6.2.0 ≤ 𝑥 ≤ 6.2.9 |
| fortinet | fortianalyzer | 6.4.0 ≤ 𝑥 ≤ 6.4.7 |
| fortinet | fortianalyzer | 7.0.0 ≤ 𝑥 < 7.0.3 |
| fortinet | fortimanager | 5.6.0 ≤ 𝑥 ≤ 5.6.11 |
| fortinet | fortimanager | 6.0.0 ≤ 𝑥 ≤ 6.0.11 |
| fortinet | fortimanager | 6.2.0 ≤ 𝑥 ≤ 6.2.9 |
| fortinet | fortimanager | 6.4.0 ≤ 𝑥 ≤ 6.4.7 |
| fortinet | fortimanager | 7.0.0 ≤ 𝑥 < 7.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration