CVE-2022-38372

A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@fortinet.com

Published

2022-11-02

Last modified

2024-10-25

Weaknesses

CWE-284

Affected products

• Fortinet Fortitester (Fortinet)
• Fortitester (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-283