critical9.1
CVE-2022-38375
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform s…
Impact
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortinac | from 9.2.0 before 9.2.7 from 9.4.0 before 9.4.2 |
| Fortinet | Fortinac-F | before 7.2.0 |