CVE-2022-22303
02.03.2022, 10:15
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortimanager | 6.2.0 ≤ 𝑥 ≤ 6.2.9 |
| fortinet | fortimanager | 6.4.0 ≤ 𝑥 ≤ 6.4.7 |
| fortinet | fortimanager | 7.0.0 ≤ 𝑥 ≤ 7.0.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration