Skip to content
OpenAdvisories
High · 7.4 CVE-2022-40678 EUVD-2022-43949GHSA-7pc3-hj79-39qj

An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11…

Published Feb 16, 2023 · Updated Oct 23, 2024 · Assigned by fortinet

Vendor: Fortinet Product: FortiNAC Category: Network devices

Description

An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow a local attacker with database access to recover user passwords.

Affected products

VendorProductAffectedFixed
Fortinet FortiNAC 9.4.0, 9.2.0 – ≤ 9.2.5, 9.1.0 – ≤ 9.1.7, 8.8.0 – ≤ 8.8.11, 8.7.0 – ≤ 8.7.6, 8.6.0 – ≤ 8.6.5, 8.5.0 – ≤ 8.5.4, 8.3.7 —

References