CVE-2022-23446 — Fortinet Fortiedr vulnerability

4 documents4 sources
Severity
4.4MEDIUMNVD
EPSS
0.0%
top 85.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Fortinet FortiedrFortinet Fortiedr
Timeline
PublishedApr 6
Latest updateApr 7

Description

A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

▶NVDfortinet/fortiedr4 versions+3
▶CVEListV5fortinet/fortinet_fortiedrFortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0

Patches

Patch: fortiguard.com ↗Patch: fortiguard.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-r8jj-pf8x-383m: A improper control of a resource through its lifetime in Fortinet FortiEDR version 5↗2022-04-07
▶
CVEList
CVE-2022-23446: A improper control of a resource through its lifetime in Fortinet FortiEDR version 5↗2022-04-06
▶

📋Vendor Advisories

1
Fortinet
A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to...↗2022-04-06
▶
CVE-2022-23446 — Fortinet Fortiedr vulnerability | cvebase