A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in order to obtain other adminstrators cookies via diagnose CLI commands.
References
| Link | Resource |
|---|---|
| https://fortiguard.com/psirt/FG-IR-22-380 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2023, 01:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:* |
|
| First Time |
Fortinet
Fortinet fortios Fortinet fortiproxy |
|
| References | (MISC) https://fortiguard.com/psirt/FG-IR-22-380 - Vendor Advisory | |
| CWE | CWE-319 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.4 |
13 Jun 2023, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-13 09:15
Updated : 2023-11-07 03:52
NVD link : CVE-2022-41327
Mitre link : CVE-2022-41327
JSON object : View
Products Affected
fortinet
- fortiproxy
- fortios
CWE
CWE-319
Cleartext Transmission of Sensitive Information