CVE-2022-23441

A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...

CVE-2022-23441

creationtimestamp| type| source ---|---|--- 2022-04-06 12:35:34+00:00| seen| https://t.me/cibsecurity/40225...

CVE-2022-23441

A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...

CVE-2022-23441

CVE-2022-23441 affects FortiEDR and Fortinet FortiEDR versions 4.0.0, 5.0.0–5.0.2, due to a hard-coded cryptographic key (CWE-321). The vulnerability could allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors, indicating a trust-management weakn...