Skip to content
OpenAdvisories
High · 7.5 CVE-2022-23443 EUVD-2022-28518GHSA-cj8v-3m6g-6r37

An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP …

Published May 4, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiSOAR Category: Network devices

Description

An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiSOAR FortiSOAR 7.0.2, 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.1, 6.4.0, 6.0.0, 5.x.x —

References