medium5.3
CVE-2022-42473
A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose i…
Impact
A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose information via logging into the database using a privileged account without a password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisoar | from 6.4.0 through 6.4.4 from 7.0.0 through 7.0.3 Version 7.2.0 |