CVE-2022-45859 — MEDIUM (4.1)

Q: How severe is CVE-2022-45859?

CVE-2022-45859 has been rated MEDIUM with a CVSS base score of 4.1/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-45859?

Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortinac, Fortinet Fortinac-F.

Vulnerability Description

An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with system access to retrieve users' passwords.

CVSS Score

4.1

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Fortinet	Fortinac	>= 8.7.0, <= 9.1.8
Fortinet	Fortinac-F	7.2.0

Related Weaknesses (CWE)

CWE-522

References

https://fortiguard.com/psirt/FG-IR-22-456Vendor Advisory
https://fortiguard.com/psirt/FG-IR-22-456Vendor Advisory

FAQ

What is CVE-2022-45859?

CVE-2022-45859 is a vulnerability with a CVSS score of 4.1 (MEDIUM). An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a loca...

How severe is CVE-2022-45859?

CVE-2022-45859 has been rated MEDIUM with a CVSS base score of 4.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-45859?

Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortinac, Fortinet Fortinac-F.