medium5.3
CVE-2022-41329
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.…
Impact
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations on the device via crafted HTTP GET requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiproxy | from 7.0.0 through 7.0.8 from 7.2.0 through 7.2.2 |
| Fortinet | Fortios | from 6.2.3 through 6.2.13 from 6.4.0 through 6.4.11 from 7.0.0 through 7.0.9 from 7.2.0 through 7.2.3 |