cve-2022-40684

CRITICAL CVSS 9.8 vulncheck_kev
Description

Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Timeline
Published
2022-10-10 00:00 UTC
Last Modified
2022-10-10
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 9.8,
  "datePublished": "2022-10-10T00:00:00Z",
  "dateUpdated": "2022-10-10T00:00:00Z",
  "description": "Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.",
  "dueDate": "2022-11-01T00:00:00Z",
  "id": "CVE-2022-40684",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Known",
  "product": "Multiple Products",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "CRITICAL",
  "source": "vulncheck_kev",
  "title": "Fortinet Multiple Products Authentication Bypass Vulnerability",
  "vendor": "Fortinet"
}
Enrichment data
Nuclei templates
Aggregated bundle (all enrichments)
View JSON API Download JSON