Vendor has released fixes to address this vulnerabilityįor more details refer advisory FG-IR-20-143 Patches FG-IR-20-143 Vulnerable version may allow a remote and authenticated admin user assigned to specific ADOM to access other ADOMs information such as device information and dashboard information. Qualys ID 377728 Vendor Reference FG-IR-20-143 CVE Reference CVE-2022-38377 CVSS Scores Base 4.3 / Temporal 3.9 DescriptionĪn improper access control vulnerability in FortiManager and FortiAnalyzer management interface may allow a remote and authenticated admin user assigned to a specific ADOM to access other ADOMs information such as device information and dashboard information.įortiManager version 6.0.0 through 6.0.11įortiAnalyzer version 7.0.0 through 7.0.3įortiAnalyzer version 6.4.0 through 6.4.8įortiAnalyzer version 6.2.0 through 6.2.10įortiAnalyzer version 6.0.0 through 6.0.12ĭetection checks for vulnerable versions of FortiManager and FortiAnalyzer. Published vulnerabilities by signing up for a Non-Qualys customers can audit their network for all We have published the detection on the date indicated,Īnd it will typically be available in the KnowledgeBase We are coding a detection and will typically publish it We are researching a detection and will publish one if Please reach out to Qualys Support for status of such support cases. Specific CVE feature requests filed via a Qualys Support case may or may not show up on this page. It may not show all the CVEs that are actively being investigated. Visibility into upcoming and new detections (QIDs) for allĭisclaimer: The Vulnerability Detection Pipeline is intended to give users an early insight into some of the CVEs the Qualys Research Team is investigating. Browse, filter by detection status, or search by CVE to get

Ms dos 6 22 dos shell iso 68