CVE-2022-43950

published 2023-05-03

CVE-2022-43950: A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions…

medium 4.7 CVSS 3.1

AV N AC L PR N UI R S C C N I L A N

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions,
8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinac	—	—
fortinet	fortinac	>= 8.7.0 < 9.4.2	9.4.2
fortinet	fortinac	8.7.0 – 8.7.6	—
fortinet	fortinac	8.8.0 – 8.8.11	—
fortinet	fortinac	9.1.0 – 9.1.9	—
fortinet	fortinac	9.2.0 – 9.2.7	—
fortinet	fortinac	9.4.0 – 9.4.1	—
fortinet	fortinac-f	—	—
fortinet	fortinac-f	—	—

CWE-601