Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-22305
HistorySep 01, 2023 - 12:15 p.m.

CVE-2022-22305

2023-09-0112:15:08
CWE-297
CWE-295
[email protected]
web.nvd.nist.gov
certificate validation
fortimanager
fortianalyzer
fortios
fortisandbox
mitm attack
network security
vulnerability
cwe-295

4.2 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

18.2%

JSON

An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.

Affected configurations

NVD
Node
fortinetfortianalyzerRange6.0.0–6.0.12
OR
fortinetfortianalyzerRange6.2.9–6.4.7
OR
fortinetfortianalyzerMatch7.0.0
OR
fortinetfortianalyzerMatch7.0.1
OR
fortinetfortianalyzerMatch7.0.2
OR
fortinetfortimanagerRange6.0.0–6.0.12
OR
fortinetfortimanagerRange6.2.0–6.2.11
OR
fortinetfortimanagerRange6.4.0–6.4.6
OR
fortinetfortimanagerMatch7.0.0
OR
fortinetfortimanagerMatch7.0.1
OR
fortinetfortisandboxRange3.0.0–3.0.7
OR
fortinetfortisandboxRange3.1.0–3.1.5
OR
fortinetfortisandboxRange3.2.0–3.2.4
OR
fortinetfortisandboxMatch3.0.1
OR
fortinetfortisandboxMatch4.0.0
OR
fortinetfortisandboxMatch4.0.1
OR
fortinetfortisandboxMatch4.0.2
OR
fortinetfortiosRange5.6.10–5.6.14
OR
fortinetfortiosRange6.0.0–6.0.17
OR
fortinetfortiosRange6.2.0–6.2.15

Related

fortinet 1
prion 1
cve 1
nessus 1
cvelist 1
fortinet
fortinet
Protect
2022-06-07 00:00:00
prion
prion
Input validation
2023-09-01 12:15:00
cve
cve
CVE-2022-22305
2023-09-01 12:15:08
nessus
nessus
Fortinet FortiOS < 6.4 MitM (FG-IR-18-292)
2022-06-16 00:00:00
cvelist
cvelist
CVE-2022-22305
2023-09-01 11:43:03

4.2 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

18.2%

JSON
Related for NVD:CVE-2022-22305
fortinet1prion1cve1nessus1cvelist1