CVE-2022-23442

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
FortinetFortinet FortiOSFortiOS 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.11, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0

References

Timeline

Published
Aug 3, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-234437.5An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GCVE-2022-234464.4A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole appliCVE-2022-234477.5An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interfaCVE-2022-234487.8A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versionsCVE-2022-234497.3A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versionsCVE-2022-23457.8Use After Free in GitHub repository vim/vim prior to 9.0.0046.CVE-2022-234509.8A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versionsCVE-2022-234518.1An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user tCVE-2022-234524.9An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. TCVE-2022-234537.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromCVE-2022-234547.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromCVE-2022-234557.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, comprom