CVE-2022-41329
En bref Sévérité MEDIUM 5.2 EPSS EPSS 0.56 % · centile 46 (2026-10-27) État PUBLISHED Publiée 2023-03-07 Mise à jour 2024-10-23 Attribuée par fortinet Statut NVD Modified Description An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations on the device via crafted HTTP GET requests.
Scores Version Score Vecteur Évalué par CVSS 3.1 MEDIUM 5.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:X/RC:C fortinet CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N NVD · psirt@fortinet.com (Secondary) CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.0.0 ≤ 7.0.8cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.2.0 ≤ 7.2.2cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.2.3 ≤ 6.2.13cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.4.0 ≤ 6.4.11cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.0.0 ≤ 7.0.9cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.2.0 ≤ 7.2.3Produits affectés Produit Versions Fortinet · FortiProxy affected 7.2.0 ≤ 7.2.2 ; affected 7.0.0 ≤ 7.0.8 Fortinet · FortiOS affected 7.2.0 ≤ 7.2.3 ; affected 7.0.0 ≤ 7.0.9 ; affected 6.4.0 ≤ 6.4.12 ; affected 6.2.3 ≤ 6.2.13
Références
Sources
