CVE-2022-43951
11.04.2023, 17:15
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and below may allow an unauthenticated attacker to access sensitive information via crafted HTTP requests.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortinac | 8.7.0 ≤ 𝑥 ≤ 9.2.7 |
| fortinet | fortinac | 9.4.0 ≤ 𝑥 < 9.4.2 |
| fortinet | fortinac-f | 𝑥 < 7.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration