CVE-2022-22303

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file...

PT-2022-15344

Name of the Vulnerable Software and Affected Versions FortiManager versions prior to 7.0.2 FortiManager versions prior to 6.4.7 FortiManager versions prior to 6.2.9 Description The issue allows a low privileged authenticated user to gain access to the FortiGate users credentials via the config...

CVE-2022-22303: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file...