{"id":"CVE-2022-22305","state":"PUBLISHED","title":"An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x","description":"An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.","publishedAt":"2023-09-01T11:43:03.878Z","updatedAt":"2024-09-27T18:40:07.999Z","severity":{"score":5.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:U/RC:C","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiAnalyzer","Fortinet FortiSandbox","Fortinet FortiManager"],"affected":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.2","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.7","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.11","versionType":"semver"},{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.12","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"4.0.0","status":"affected","lessThanOrEqual":"4.0.2","versionType":"semver"},{"version":"3.2.0","status":"affected","lessThanOrEqual":"3.2.4","versionType":"semver"},{"version":"3.1.0","status":"affected","lessThanOrEqual":"3.1.5","versionType":"semver"},{"version":"3.0.0","status":"affected","lessThanOrEqual":"3.0.7","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.1","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.6","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.11","versionType":"semver"},{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.12","versionType":"semver"}]}],"references":["https://fortiguard.com/psirt/FG-IR-18-292"],"weaknesses":["CWE-297"],"ingestedAt":"2026-10-29T19:49:38.433Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/22xxx/CVE-2022-22305.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-22305","state":"PUBLISHED","datePublished":"2023-09-01T11:43:03.878Z","dateUpdated":"2024-09-27T18:40:07.999Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2022-01-03T09:39:36.530Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers."}],"affected":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.2","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.7","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.11","versionType":"semver"},{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.12","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"4.0.0","status":"affected","lessThanOrEqual":"4.0.2","versionType":"semver"},{"version":"3.2.0","status":"affected","lessThanOrEqual":"3.2.4","versionType":"semver"},{"version":"3.1.0","status":"affected","lessThanOrEqual":"3.1.5","versionType":"semver"},{"version":"3.0.0","status":"affected","lessThanOrEqual":"3.0.7","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.1","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.6","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.11","versionType":"semver"},{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.12","versionType":"semver"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-18-292","name":"https://fortiguard.com/psirt/FG-IR-18-292"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:U/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-297","lang":"en","description":"Information disclosure","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2023-09-01T11:43:03.878Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiManager version 7.0.2 or above.\r\nPlease upgrade to FortiManager version 6.4.7 or above.\n\r\nPlease upgrade to FortiAnalyzer version 7.0.3 or above.\r\nPlease upgrade to FortiAnalyzer version 6.4.8 or above.\n\r\nPlease upgrade to FortiSandbox version 4.2.0 or above \n\r\n "}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-18-292","name":"https://fortiguard.com/psirt/FG-IR-18-292","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T03:07:50.194Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-27T18:01:39.754816Z","id":"CVE-2022-22305","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-27T18:40:07.999Z"}}]}}}