PT-2022-6447 · Fortinet · Fortiproxy+1

Published 2022-10-07 · Updated 2023-03-14 · CVE-2022-42476

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiOS versions 6.4.11 and earlier, 7.0.0 through 7.0.8, 7.2.0 through 7.2.2 FortiProxy versions 7.0.0 through 7.0.8, 7.2.0 through 7.2.2

Description A relative path traversal issue in the Virtual Domains (VDOM) technology of FortiOS and FortiProxy allows privileged VDOM administrators to escalate their privileges to super admin via crafted CLI requests, potentially by sending specially formed GET, POST, and HEAD requests. This could enable an attacker to gain higher privileges.

Recommendations For FortiOS versions 6.4.11 and earlier, update to version 6.4.11 or later to resolve the issue. For FortiOS versions 7.0.0 through 7.0.8, update to a version after 7.0.8 to resolve the issue. For FortiOS versions 7.2.0 through 7.2.2, update to a version after 7.2.2 to resolve the issue. For FortiProxy versions 7.0.0 through 7.0.8, update to a version after 7.0.8 to resolve the issue. For FortiProxy versions 7.2.0 through 7.2.2, update to a version after 7.2.2 to resolve the issue.

Fix

Path traversal

Relative Path Traversal

Weakness Enumeration

CWE-22

CWE-23

Related Identifiers

BDU:2023-01331

CVE-2022-42476

Affected Products

Fortios

Fortiproxy

References · 9

• https://fortiguard.com/psirt/FG-IR-22-401 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01331 · Security Note
• https://osv.dev/vulnerability/CVE-2022-42476 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42476 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42476 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/705854 · Security Note
• https://vuldb.com/ru/?id.222499 · Note
• https://fortiguard.fortinet.com/psirt/FG-IR-22-401 · Note
• https://t.me/cibsecurity/59596 · Telegram Post