CVE-2022-26119
published 2022-11-02CVE-2022-26119: A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.19%
9.4th percentile
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortinet | — | — |
| fortinet | fortinet_fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | 5.1.0 – 5.1.3 | — |
| fortinet | fortisiem | 5.2.5 – 5.2.8 | — |
| fortinet | fortisiem | 5.3.0 – 5.3.3 | — |
| fortinet | fortisiem | 6.1.0 – 6.1.2 | — |
| fortinet | fortisiem | 6.3.0 – 6.3.3 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9qf9-3f53-7x3q: A improper authentication vulnerability in Fortinet FortiSIEM before 6
ghsa_unreviewed·2022-11-02
CVE-2022-26119 [HIGH] CWE-287 GHSA-9qf9-3f53-7x3q: A improper authentication vulnerability in Fortinet FortiSIEM before 6
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.
Fortinet
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to pe...
vendor_fortinet·2022-11-02·CVSS 7.8
CVE-2022-26119 [HIGH] CWE-798 A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to pe...
FG-IR-22-064: A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to pe...
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.
CVEs: CVE-2022-26119
CWEs: CWE-798
CVSS: 7.8 (high)
Affected products: FortiSIEM, Fortinet
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-11-02
Published