Skip to content
fr Sign in
9.3 Critical

CVE-2022-41331 A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before…

Description

A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests.

Affected products and versions

Product Affected versions Fixed in
FortiPresence 1.2 1.2.0 → 1.2.1 No fix stated
FortiPresence 1.1 1.1.0 → 1.1.1 No fix stated
FortiPresence 1.0.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiPresence

The 2 CVEs of FortiPresence →
CVE-2023-27998 A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of… 5.3 Medium
Track this CVE