Lucene search
HistoryAug 03, 2022 - 2:15 p.m.
CVE-2022-27484
cve-2022-27484
fortinet
fortiadc
vulnerability
password change
authentication bypass
http request crafted
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
21.9%
A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.
Affected configurations
Node
fortinetfortiadcRange5.0.0–6.2.4
References
Related
prion
prion
Design/Logic Flaw
2022-08-03 14:15:00
cve
cve
CVE-2022-27484
2022-08-03 14:15:08
fortinet
fortinet
FortiADC - Unverified password change over the GUI
2022-08-02 00:00:00
cvelist
cvelist
CVE-2022-27484
2022-08-03 13:20:10
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
21.9%
Related for NVD:CVE-2022-27484