An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.
References
Link | Resource |
---|---|
https://fortiguard.com/psirt/FG-IR-18-292 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: fortinet
Published: 2023-09-01T11:43:03.878Z
Updated: 2023-09-01T11:43:03.878Z
Reserved: 2022-01-03T09:39:36.530Z
Link: CVE-2022-22305
JSON object: View
NVD Information
Status : Modified
Published: 2023-09-01T12:15:08.363
Modified: 2023-11-07T03:43:51.810
Link: CVE-2022-22305
JSON object: View
Redhat Information
No data.