Lucene search

[email protected]CVE-2022-26122

HistoryNov 02, 2022 - 12:15 p.m.

CVE-2022-26122

2022-11-0212:15:00

CWE-345

[email protected]

web.nvd.nist.gov

cve-2022-26122

cwe-345

data authenticity

forticlient

fortimail

fortios

av engines

security vulnerability

nvd

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

8.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

31.5%

JSON

An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64.

CPENameOperatorVersion
fortinet:fortimailfortinet fortimaileq4.1.0
fortinet:fortimailfortinet fortimaille7.0.2
fortinet:fortiosfortinet fortiosle6.2.11
fortinet:fortiosfortinet fortioseq7.2.0
fortinet:fortiosfortinet fortiosle6.0.15
fortinet:fortiosfortinet fortiosle6.4.10
fortinet:fortiosfortinet fortiosle7.0.6
fortinet:fortimailfortinet fortimaille6.0.12
fortinet:fortimailfortinet fortimaille6.2.9
fortinet:fortimailfortinet fortimaille6.4.6

CPE	Name	Operator	Version
fortinet:fortimail	fortinet fortimail	eq	4.1.0
fortinet:fortimail	fortinet fortimail	le	7.0.2
fortinet:fortios	fortinet fortios	le	6.2.11
fortinet:fortios	fortinet fortios	eq	7.2.0
fortinet:fortios	fortinet fortios	le	6.0.15
fortinet:fortios	fortinet fortios	le	6.4.10
fortinet:fortios	fortinet fortios	le	7.0.6
fortinet:fortimail	fortinet fortimail	le	6.0.12
fortinet:fortimail	fortinet fortimail	le	6.2.9
fortinet:fortimail	fortinet fortimail	le	6.4.6

Rows per page:

1-10 of 241

References

fortiguard.com/psirt/FG-IR-22-074

Social References

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

8.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for CVE-2022-26122

prion1 cvelist1 fortinet1