Skip to content
OpenAdvisories
Low · 3.9 CVE-2022-43950 EUVD-2022-46920GHSA-4jvr-8wq7-595q

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below…

Published May 3, 2023 · Updated Oct 22, 2024 · Assigned by fortinet

Vendor: Fortinet Product: FortiNAC Category: Network devices

Description

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions,
8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.

Affected products

VendorProductAffectedFixed
Fortinet FortiNAC 9.4.0 – ≤ 9.4.1, 9.2.0 – ≤ 9.2.7, 9.1.0 – ≤ 9.1.9, 8.8.0 – ≤ 8.8.11, 8.7.0 – ≤ 8.7.6 —

References