vulnerability
Fortinet FortiManager: Unspecified Security Vulnerability (CVE-2022-38377)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Nov 25, 2022 | Jan 17, 2023 | Aug 1, 2025 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Nov 25, 2022
Added
Jan 17, 2023
Modified
Aug 1, 2025
Description
An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.0 through 6.0.12 may allow a remote and authenticated admin user assigned to a specific ADOM to access other ADOMs information such as device information and dashboard information.
Solutions
fortinet-fortimanager-upgrade-6_0_11fortinet-fortimanager-upgrade-6_2_9fortinet-fortimanager-upgrade-6_4_7fortinet-fortimanager-upgrade-7_0_3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.