vulnerability

Fortinet FortiProxy: Authentication bypass in the administrative interface (CVE-2022-40684)

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Oct 7, 2022
Added
Oct 10, 2022
Modified
Mar 13, 2023

Description

CVE-2022-40684 is an authentication bypass in the administrative interface of these products; successful exploitation would allow a remote, unauthenticated attacker to log into vulnerable devices.

Solution

fortiproxy-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.