Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2022-45857

An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a passw

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiManager

Default version status: unaffected

  • 7.0.0 to ≤ 7.0.1affected
  • 6.4.0 to ≤ 6.4.7affected
  • 6.2.0 to ≤ 6.2.8affected

References