PT-2023-14785 · Fortinet · Fortinac

Publicado 2023-05-03 · Atualizado 2023-05-11 · CVE-2022-45858

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions FortiNAC versions 9.4.1 and below FortiNAC versions 9.2.6 and below FortiNAC versions 9.1.0 and below FortiNAC versions 8.8.0 and below FortiNAC versions 8.7.0 and below

Description A use of a weak cryptographic algorithm vulnerability in FortiNAC may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks.

Recommendations For FortiNAC versions 9.4.1 and below, consider updating to a version that uses a stronger cryptographic algorithm. For FortiNAC versions 9.2.6 and below, consider updating to a version that uses a stronger cryptographic algorithm. For FortiNAC versions 9.1.0 and below, consider updating to a version that uses a stronger cryptographic algorithm. For FortiNAC versions 8.8.0 and below, consider updating to a version that uses a stronger cryptographic algorithm. For FortiNAC versions 8.7.0 and below, consider updating to a version that uses a stronger cryptographic algorithm.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2022-45858

Produtos afetados

Fortinac

Referências · 5

• https://fortiguard.com/psirt/FG-IR-22-452 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-45858 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-45858 · Aviso do Fabricante
• https://t.me/cibsecurity/63264 · Publicação no Telegram
• https://t.me/cvenotify/49779 · Publicação no Telegram