CVE-2022-45859

An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with system access to retrieve users' passwords.

Score

CVSS 3.1 4.4 Medium

Status

Modified - psirt@fortinet.com

Published

2023-05-03

Last modified

2024-10-22

Weaknesses

CWE-522

Affected products

• Fortinac (Fortinet)
• Fortinac-f (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-456