CVE-2022-35842
02.11.2022, 12:15
An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortios | 6.4.0 ≤ 𝑥 ≤ 6.4.9 |
| fortinet | fortios | 7.0.0 ≤ 𝑥 ≤ 7.0.6 |
| fortinet | fortios | 7.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration