critical9.8
CVE-2022-41331
A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthentic…
Impact
A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiproxy | from 1.0.0 before 2.0.0 |