2 matches found
CVE-2022-23443
An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests...
7.5CVSS7.1AI score0.01242EPSS
SaveExploits0References1
CVE-2022-23443
FortiSOAR flaw (CVE-2022-23443) : Fortinet FortiSOAR before 7.2.0 has improper access control (CWE-284) that allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests. Exploitation occurs over the network with no auth. Advisories from FortiGuard (FG-IR-22-041) and ...
7.5CVSS7.5AI score0.01242EPSS
SaveExploits0References1Affected Software1
20