high7.5
CVE-2022-23443
An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
Impact
An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisoar | from 6.4.0 through 6.4.4 from 7.0.0 through 7.0.2 Version 6.0.0 |