CVE-2022-43949

5.9MEDIUM

Key Information:

Vendor
Fortinet
Status
Fortisiem
Vendor
CVE Published:
13 June 2023

Summary

A use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods.

Affected Version(s)

FortiSIEM 6.7.0 <= 6.7.1

FortiSIEM 6.6.0 <= 6.6.3

FortiSIEM 6.5.0 <= 6.5.1

References

https://fortiguard.com/psirt/FG-IR-22-259

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.