CVE-2022-45860 MEDIUM

CVE-2022-45860

Vendor Fortinet
Product FortiNAC
Weakness CWE-1390
Published May 3, 2023
Last update October 23, 2024
View on NVD All CVEs

CVSS base score

5.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:X/RC:R

What the vulnerability does

01Description

A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in device registration page may allow an unauthenticated attacker to perform password spraying attacks with an increased chance of success.

Key dates

02Disclosure timeline

May 3, 2023 CVE published
October 23, 2024 Record updated