{"id":"CVE-2022-45858","state":"PUBLISHED","title":"A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increas","description":"A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks.","publishedAt":"2023-05-03T21:26:54.032Z","updatedAt":"2024-10-22T20:46:24.743Z","severity":{"score":3.8,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:U/RC:R","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiNAC"],"affected":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","status":"affected","lessThanOrEqual":"9.4.1","versionType":"semver"},{"version":"9.2.0","status":"affected","lessThanOrEqual":"9.2.6","versionType":"semver"},{"version":"9.1.0","status":"affected","lessThanOrEqual":"9.1.9","versionType":"semver"},{"version":"8.8.0","status":"affected","lessThanOrEqual":"8.8.11","versionType":"semver"},{"version":"8.7.0","status":"affected","lessThanOrEqual":"8.7.6","versionType":"semver"},{"version":"7.2.0","status":"affected"}]}],"references":["https://fortiguard.com/psirt/FG-IR-22-452"],"weaknesses":["CWE-327"],"ingestedAt":"2026-10-29T19:50:51.061Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/45xxx/CVE-2022-45858.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-45858","state":"PUBLISHED","datePublished":"2023-05-03T21:26:54.032Z","dateUpdated":"2024-10-22T20:46:24.743Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2022-11-23T14:57:05.612Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks."}],"affected":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","status":"affected","lessThanOrEqual":"9.4.1","versionType":"semver"},{"version":"9.2.0","status":"affected","lessThanOrEqual":"9.2.6","versionType":"semver"},{"version":"9.1.0","status":"affected","lessThanOrEqual":"9.1.9","versionType":"semver"},{"version":"8.8.0","status":"affected","lessThanOrEqual":"8.8.11","versionType":"semver"},{"version":"8.7.0","status":"affected","lessThanOrEqual":"8.7.6","versionType":"semver"},{"version":"7.2.0","status":"affected"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-452","name":"https://fortiguard.com/psirt/FG-IR-22-452"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.8,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:U/RC:R"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-327","lang":"en","description":"Improper access control","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2023-05-03T21:26:54.032Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiNAC-F version 7.2.1 or above\r\nPlease upgrade to FortiNAC version 9.4.2 or above\r\nPlease upgrade to FortiNAC version 9.2.7 or above"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-452","name":"https://fortiguard.com/psirt/FG-IR-22-452","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T14:24:02.964Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-22T20:18:05.923955Z","id":"CVE-2022-45858","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-22T20:46:24.743Z"}}]}}}