CVE-2022-27484

A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.

Score

CVSS 3.1 5.4 Medium

Status

Modified - psirt@fortinet.com

Published

2022-08-03

Last modified

2024-10-22

Weaknesses

CWE-284, CWE-287

Affected products

• Fortiadc (Fortinet)
• Fortinet Fortiadc (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-055