PT-2022-27993 · Fortinet · Fortigate

Published 2022-12-23 · Updated 2025-01-17 · CVE-2022-4684

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions usememos/memos versions prior to 0.9.0

Description The issue is related to improper access control in the usememos/memos GitHub repository. There have been real-world incidents where this issue was exploited, including a leak of data from over 15,000 FortiGate devices, which included sensitive information such as VPN credentials, private keys, and configurations. This highlights the potential impact of the issue on devices that remain unpatched.

Recommendations For versions prior to 0.9.0, update to version 0.9.0 or later to resolve the issue. Additionally, administrators should reset credentials and review their setups to minimize the risk of exploitation. As a temporary workaround, consider restricting access to sensitive areas of the repository until the update is applied.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-4684

GHSA-QR52-59R6-49F4

GO-2022-1218

Affected Products

Fortigate

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4684.json · Exploit
• 🔥 https://huntr.dev/bounties/b66f2bdd-8b41-456c-bf65-92302c2e03b5 · Exploit
• https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9 · Patch
• https://osv.dev/vulnerability/GHSA-qr52-59r6-49f4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4684 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4684 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-1218 · Vendor Advisory
• https://github.com/usememos/memos · Note
• https://t.me/cibsecurity/55233 · Telegram Post
• https://twitter.com/ObaDafidi_001/status/1880190347185463324 · Twitter Post
• https://github.com/advisories/GHSA-qr52-59r6-49f4 · Note
• https://t.me/cvenotify/40492 · Telegram Post