Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-45857

Published: 05/01/2023 Updated: 07/11/2023
CVSS v3 Base Score: 7.5 | Impact Score: 5.3 | Exploitability Score: 1.6
VMScore: 0
Subscribe to Fortinet

Vulnerability Summary

An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an malicious user to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fortinet fortimanager

Vendor Advisories

Fortinet Security Advisories: FortiManager - Incorrect user management behavior leads to passwordless admin
An incorrect user management vulnerability [CWE-286] in the FortiManager VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin profiled admin account is deleted ...

References

NVD-CWE-Otherhttps://fortiguard.com/psirt/FG-IR-22-371https://nvd.nist.govhttps://fortiguard.com/psirt/FG-IR-22-371
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validationCVE-2024-34413CVE-2024-34089CVE-2024-33408localSQLCVE-2024-0402CVE-2024-33910CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook