7.5
High
CVE-2022-23443 An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API…
Description
An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiSOAR | Versions not published |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of Fortinet FortiSOAR
The 6 CVEs of Fortinet FortiSOAR →
CVE-2022-42473
A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and…
5.3
Medium
CVE-2022-29061
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
7.2
High
CVE-2022-35847
An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR…
6.3
Medium
CVE-2022-30298
An improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1 allows a GUI user who has…
7.0
High