CVE-2022-38380

published 2022-11-02

CVE-2022-38380: An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I L A N

An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to modify the interface settings via the API.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinet	—	—
fortinet	fortinet_fortios	—	—
fortinet	fortios	—	—
fortinet	fortios	—	—
fortinet	fortios	7.0.0 – 7.0.7	—
fortinet	fortiswitchmanager	—	—

CWE-284