CVE-2022-22305

🗓️ 01 Sep 2023 11:43:03Reported by fortinetType

Improper certificate validation vulnerability in FortiManager, FortiAnalyzer, FortiOS, FortiSandbo

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-22305	1 Sep 202316:14	–	circl
CNNVD	多款Fortinet产品信任管理问题漏洞	7 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-22305	1 Sep 202311:43	–	cvelist
EUVD	EUVD-2022-27451	3 Oct 202520:07	–	euvd
Fortinet	Protect	7 Jun 202200:00	–	fortinet
Tenable Nessus	Fortinet Fortigate Lack of certificate verification when establishing secure connections (FG-IR-18-292)	26 Oct 202400:00	–	nessus
Tenable Nessus	Fortinet FortiOS < 6.4 MitM (FG-IR-18-292)	16 Jun 202200:00	–	nessus
NCSC	Vulnerability fixed in Fortinet products	8 Jun 202200:00	–	ncsc
NVD	CVE-2022-22305	1 Sep 202312:15	–	nvd
Prion	Input validation	1 Sep 202312:15	–	prion

NVD

Node

fortinet fortianalyzerRange6.0.0–6.0.12

fortinet fortianalyzerRange6.2.9–6.4.7

fortinet fortianalyzerMatch7.0.0

fortinet fortianalyzerMatch7.0.1

fortinet fortianalyzerMatch7.0.2

fortinet fortimanagerRange6.0.0–6.0.12

fortinet fortimanagerRange6.2.0–6.2.11

fortinet fortimanagerRange6.4.0–6.4.6

fortinet fortimanagerMatch7.0.0

fortinet fortimanagerMatch7.0.1

fortinet fortisandboxRange3.0.0–3.0.7

fortinet fortisandboxRange3.1.0–3.1.5

fortinet fortisandboxRange3.2.0–3.2.4

fortinet fortisandboxMatch3.0.1

fortinet fortisandboxMatch4.0.0

fortinet fortisandboxMatch4.0.1

fortinet fortisandboxMatch4.0.2

fortinet fortiosRange5.6.10–5.6.14

fortinet fortiosRange6.0.0–6.0.17

fortinet fortiosRange6.2.0–6.2.15

[
  {
    "vendor": "Fortinet",
    "product": "FortiAnalyzer",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.11",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.12",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fortinet",
    "product": "FortiSandbox",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "4.0.0",
        "lessThanOrEqual": "4.0.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "3.2.0",
        "lessThanOrEqual": "3.2.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "3.1.0",
        "lessThanOrEqual": "3.1.5",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "3.0.0",
        "lessThanOrEqual": "3.0.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fortinet",
    "product": "FortiManager",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.6",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.11",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.12",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-18-292

21 Nov 2024 06:46Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.2 - 5.4

EPSS0.00056

SSVC