A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions,
8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.
References
| Link | Resource |
|---|---|
| https://fortiguard.com/psirt/FG-IR-22-407 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 May 2023, 17:51
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.7 |
| CPE | cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://fortiguard.com/psirt/FG-IR-22-407 - Vendor Advisory | |
| First Time |
Fortinet
Fortinet fortinac Fortinet fortinac-f |
|
| CWE | CWE-601 |
03 May 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-03 22:15
Updated : 2023-11-07 03:54
NVD link : CVE-2022-43950
Mitre link : CVE-2022-43950
JSON object : View
Products Affected
fortinet
- fortinac-f
- fortinac
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')