CVE-2022-29053

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an attacker in possession of the encrypted file to decipher it.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.3 LOW
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
fortinetCNA
2.3 LOW
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:U/RL:U/RC:C
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
fortinetfortios
6.0.0 ≤
𝑥
≤ 6.0.14
fortinetfortios
6.2.0 ≤
𝑥
≤ 6.2.11
fortinetfortios
6.4.0 ≤
𝑥
≤ 6.4.9
fortinetfortios
7.0.0 ≤
𝑥
< 7.0.6
fortinetfortios
7.2.0
𝑥
= Vulnerable software versions
References
https://fortiguard.com/psirt/FG-IR-22-158
https://fortiguard.com/psirt/FG-IR-22-158