9.8
CVSSv3

CVE-2022-38375

Published: 16/02/2023 Updated: 07/11/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

An improper authorization vulnerability [CWE-285]  in Fortinet FortiNAC version 9.4.0 up to and including 9.4.1 and prior to 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.

Vulnerable Product Search on Vulmon Subscribe to Product

fortinet fortinac-f

fortinet fortinac