Skip to content
fr Sign in
3.9 Low

CVE-2022-45859 An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and…

Description

An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with system access to retrieve users' passwords.

Affected products and versions

Product Affected versions Fixed in
FortiNAC 9.4 9.4.0 → 9.4.1 No fix stated
FortiNAC 9.2 9.2.0 → 9.2.6 No fix stated
FortiNAC 9.1 9.1.0 → 9.1.8 No fix stated
FortiNAC 8.8 8.8.0 → 8.8.11 No fix stated
FortiNAC 8.7 8.7.0 → 8.7.6 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiNAC

The 23 CVEs of FortiNAC →
CVE-2023-33300 A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and… 4.8 Medium CVE-2024-31488 An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through… 6.1 Medium CVE-2023-26206 An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 -… 6.8 Medium CVE-2023-33299 A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier… 9.6 Critical
Track this CVE