Improper Certificate Validation in Fortinet's FortiManager and FortiAnalyzer Products

CVE-2022-22305

What is CVE-2022-22305?

An improper certificate validation flaw exists in various Fortinet products, including FortiManager and FortiAnalyzer, allowing an unauthenticated network adjacent attacker to execute a man-in-the-middle (MitM) attack. This vulnerability can potentially compromise the confidentiality and integrity of communication between affected devices and external peers, leading to critical security implications for affected users. Affected users should apply the necessary patches and updates as provided by Fortinet to safeguard their systems.

References