CVE-2022-45859

published 2023-05-03

CVE-2022-45859: An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all…

Priority P4 19 medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C H I N A N

An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with system access to retrieve users' passwords.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinac	—	—
fortinet	fortinac	8.7.0 – 9.1.8	—
fortinet	fortinac	8.8.0 – 8.8.11	—
fortinet	fortinac	9.1.0 – 9.1.8	—
fortinet	fortinac	>= 9.2.0 < 9.2.7	9.2.7
fortinet	fortinac	9.2.0 – 9.2.6	—
fortinet	fortinac	>= 9.4.0 < 9.4.2	9.4.2
fortinet	fortinac	9.4.0 – 9.4.1	—
fortinet	fortinac-f	—	—
fortinet	fortinac-f	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-522