medium6.5
CVE-2022-45857
An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a Fort…
Impact
An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortimanager | from 6.2.0 before 6.2.9 from 6.4.0 before 6.4.8 from 7.0.0 before 7.0.2 |