Improper Certificate Validation in FortiAnalyzer and FortiManager
CVE-2023-22642

6.8MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortianalyzer
Fortimanager
Vendor
CVE Published:
11 April 2023

What is CVE-2023-22642?

An improper certificate validation issue exists in FortiAnalyzer and FortiManager, specifically affecting versions 6.4.8 through 7.2.1. This vulnerability could enable an attacker to intercept and alter communications between the affected devices and FortiGuard servers, facilitating potential Man-in-the-Middle attacks. Users must ensure their systems are updated promptly to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FortiAnalyzer 7.2.0 <= 7.2.1

FortiAnalyzer 7.0.0 <= 7.0.5

FortiAnalyzer 6.4.8 <= 6.4.10

References

https://fortiguard.com/psirt/FG-IR-22-502

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.