5.3
Moyenne
CVE-2022-22302 A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1,…
Description
A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and 6.0.0 through 6.0.13 and FortiAuthenticator version 5.5.0 and all versions of 6.1 and 6.0 may allow a local unauthorized party to retrieve the Fortinet private keys used to establish secure communication with both Apple Push Notification and Google Cloud Messaging services, via accessing the files on the filesystem.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiAuthenticator | 6.1.0 | Pas de correctif indiqué |
| FortiAuthenticator 6.0 | 6.0.0 → 6.0.4 | Pas de correctif indiqué |
| FortiAuthenticator | 5.5.0 | Pas de correctif indiqué |
| FortiOS 6.4 | 6.4.0 → 6.4.1 | Pas de correctif indiqué |
| FortiOS 6.2 | 6.2.0 → 6.2.9 | Pas de correctif indiqué |
| FortiOS 6.0 | 6.0.0 → 6.0.13 | Pas de correctif indiqué |
Autres CVE de FortiAuthenticator
Les 11 CVE de FortiAuthenticator →
CVE-2025-53379
A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all…
7.0
Élevée
CVE-2026-44277
A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0,…
9.1
Critique
CVE-2026-21743
A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all…
6.8
Moyenne
CVE-2025-57823
A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6,…
2.6
Faible