vulnerability
Fortinet FortiManager: Unspecified Security Vulnerability (CVE-2022-38377)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:N/AC:L/Au:M/C:P/I:N/A:N) | Nov 25, 2022 | Jan 17, 2023 | Jan 28, 2025 |
Severity
3
CVSS
(AV:N/AC:L/Au:M/C:P/I:N/A:N)
Published
Nov 25, 2022
Added
Jan 17, 2023
Modified
Jan 28, 2025
Description
An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.0 through 6.0.12 may allow a remote and authenticated admin user assigned to a specific ADOM to access other ADOMs information such as device information and dashboard information.
Solution(s)
fortinet-fortimanager-upgrade-6_0_11fortinet-fortimanager-upgrade-6_2_9fortinet-fortimanager-upgrade-6_4_7fortinet-fortimanager-upgrade-7_0_3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.