Skip to content
fr Sign in
5.4 Medium

CVE-2022-22305 An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below;…

Description

An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.

Affected products and versions

Product Affected versions Fixed in
FortiAnalyzer 7.0 7.0.0 → 7.0.2 No fix stated
FortiAnalyzer 6.4 6.4.0 → 6.4.7 No fix stated
FortiAnalyzer 6.2 6.2.0 → 6.2.11 No fix stated
FortiAnalyzer 6.0 6.0.0 → 6.0.12 No fix stated
FortiSandbox 4.0 4.0.0 → 4.0.2 No fix stated
FortiSandbox 3.2 3.2.0 → 3.2.4 No fix stated
FortiSandbox 3.1 3.1.0 → 3.1.5 No fix stated
FortiSandbox 3.0 3.0.0 → 3.0.7 No fix stated
FortiManager 7.0 7.0.0 → 7.0.1 No fix stated
Show the 3 other branches
Product Affected versions Fixed in
FortiManager 6.4 6.4.0 → 6.4.6 No fix stated
FortiManager 6.2 6.2.0 → 6.2.11 No fix stated
FortiManager 6.0 6.0.0 → 6.0.12 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiAnalyzer

The 74 CVEs of FortiAnalyzer →
CVE-2026-23706 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]… 5.9 Medium CVE-2026-23707 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]… 6.5 Medium CVE-2026-23705 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]… 6.5 Medium CVE-2025-46773 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]… 7.9 High
Track this CVE