CVE-2022-38380

🗓️ 02 Nov 2022 00:00:00Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 66 Views

Improper access control vulnerability in FortiOS 7.2.0 and versions 7.0.0 through 7.0.7 allows remote authenticated read-only user to modify interface settings via API. [CVE-2022-38380

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-38380	2 Nov 202212:15	–	attackerkb
BDU FSTEC	The vulnerability of FortiOS operating systems, related to access control deficiencies, allows attackers to modify interface settings.	27 Dec 202200:00	–	bdu_fstec
CNNVD	Fortinet FortiOS 安全漏洞	1 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-38380	2 Nov 202200:00	–	cvelist
Fortinet	Protect	1 Nov 202200:00	–	fortinet
Tenable Nessus	Fortinet Fortigate Read-Only users able to add/modify the Interface fields using the API (FG-IR-22-174)	4 Nov 202200:00	–	nessus
NCSC	Vulnerabilities fixed in FortiOS	2 Nov 202200:00	–	ncsc
NVD	CVE-2022-38380	2 Nov 202212:15	–	nvd
OSV	CVE-2022-38380	2 Nov 202212:15	–	osv
Prion	Improper access control	2 Nov 202212:15	–	prion

NVD

Node

fortinet fortiosRange7.0.0–7.0.7

fortinet fortiosMatch7.2.0

[
  {
    "vendor": "Fortinet",
    "product": "Fortinet FortiOS",
    "versions": [
      {
        "version": "FortiOS 7.2.0, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0",
        "status": "affected"
      }
    ]
  }
]