Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2022-40678

An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow a local attacker with database access to recover user passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiNAC

Default version status: unaffected

  • 9.4.0affected
  • 9.2.0 to ≤ 9.2.5affected
  • 9.1.0 to ≤ 9.1.7affected
  • 8.8.0 to ≤ 8.8.11affected
  • 8.7.0 to ≤ 8.7.6affected
  • 8.6.0 to ≤ 8.6.5affected
  • 8.5.0 to ≤ 8.5.4affected
  • 8.3.7affected

References