CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-35842
https://notcve.org/view.php?id=CVE-2022-35842
An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS. Una exposición de información sensible a una vulnerabilidad de un actor no autorizado [CWE-200] en FortiOS SSL-VPN versiones 7.2.0, versiones 7.0.0 a 7.0.6 y versiones 6.4.0 a 6.4.9 puede permitir que un atacante remoto no autenticado obtenga información sobre las configuraciones LDAP y SAML configuradas en FortiOS. • https://fortiguard.com/psirt/FG-IR-22-223 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2022-38380
https://notcve.org/view.php?id=CVE-2022-38380
An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to modify the interface settings via the API. Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiOS versión 7.2.0 y versiones 7.0.0 a 7.0.7 puede permitir que un usuario remoto de solo lectura autenticado modifique la configuración de la interfaz a través de la API. • https://fortiguard.com/psirt/FG-IR-22-174 •
CVSS: 9.8EPSS: 97%CPEs: 6EXPL: 23CVE-2022-40684 – Fortinet Multiple Products Authentication Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2022-40684
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. Una omisión de autenticación usando una ruta o canal alternativo [CWE-288] en Fortinet FortiOS versión versiones 7.2.0 hasta 7.2.1 y 7.0.0 hasta 7.0.6, FortiProxy versión 7.2.0 y versiones 7.0.0 hasta 7.0.6 y FortiSwitchManager versión 7.2.0 y 7.0.0, permite a un atacante no autenticado llevar a cabo operaciones en la interfaz administrativa por medio de peticiones HTTP o HTTPS especialmente diseñadas Fortinet FortiOS, FortiProxy, and FortiSwitchManager version 7.2.1 suffers from a authentication bypass vulnerability. Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. • https://www.exploit-db.com/exploits/51092 https://github.com/horizon3ai/CVE-2022-40684 https://github.com/carlosevieira/CVE-2022-40684 https://github.com/HAWA771/CVE-2022-40684 https://github.com/hughink/CVE-2022-40684 https://github.com/secunnix/CVE-2022-40684 https://github.com/kljunowsky/CVE-2022-40684-POC https://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner https://github.com/mohamedbenchikh/CVE-2022-40684 https://github.com/qingsiweisan/CVE-2022-40684 https:&#x • CWE-287: Improper Authentication •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2022-29055
https://notcve.org/view.php?id=CVE-2022-29055
A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via an HTTP GET request. Un acceso de puntero no inicializado en Fortinet FortiOS versión 7.2.0, 7.0.0 hasta 7.0.5, 6.4.0 hasta 6.4.8, 6.2.0 hasta 6.2.10, 6.0.x, FortiProxy versión 7. 0.0 hasta 7.0.4, 2.0.0 hasta 2.0.9, 1.2.x permite a un atacante remoto no autenticado o autenticado bloquear el demonio sslvpn por medio de una petición HTTP GET • https://fortiguard.com/psirt/FG-IR-22-086 • CWE-824: Access of Uninitialized Pointer •
CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0CVE-2021-43080
https://notcve.org/view.php?id=CVE-2021-43080
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0, version 6.4.0 through 6.4.9, version 7.0.0 through 7.0.5 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack through the URI parameter via the Threat Feed IP address section of the Security Fabric External connectors. Una vulnerabilidad de neutralización inapropiada de la entrada durante la generación de páginas web [CWE-79] en FortiOS versión 7.2.0, versiones 6.4.0 hasta 6.4.9, versiones 7.0.0 hasta 7.0.5, puede permitir a un atacante autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) almacenado mediante el parámetro URI por medio de la sección de dirección IP de Threat Feed de los conectores externos de Security Fabric. • https://fortiguard.com/psirt/FG-IR-21-222 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •