CVE-2022-29053

EUVD-2022-33466
A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an attacker in possession of the encrypted file to decipher it.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.3 LOW
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
fortinetCNA
2.3 LOW
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:U/RL:U/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
Affected Products (NVD)
VendorProductVersion
fortinetfortios
6.0.0 ≤
𝑥
≤ 6.0.14
fortinetfortios
6.2.0 ≤
𝑥
≤ 6.2.11
fortinetfortios
6.4.0 ≤
𝑥
≤ 6.4.9
fortinetfortios
7.0.0 ≤
𝑥
< 7.0.6
fortinetfortios
7.2.0
𝑥
= Vulnerable software versions
References
https://fortiguard.com/psirt/FG-IR-22-158
https://fortiguard.com/psirt/FG-IR-22-158