CVE-2022-23443: High severity fortinet fortisoar imap connector vulnerability
Published May 4, 2022
·Updated
An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
Affected Software
3 affected components
Fortinet FortiSOAR>=6.4.0<=6.4.4
Fortinet FortiSOAR>=7.0.0<=7.0.2
Fortinet FortiSOAR=6.0.0
Event History
May 4, 2022
CVE Published
via MITRE·03:25 PM
Data Sourced
via MITRE·03:25 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-23443?
CVE-2022-23443 has been classified as a critical severity vulnerability.
2
How do I fix CVE-2022-23443?
To fix CVE-2022-23443, upgrade Fortinet FortiSOAR to version 7.2.0 or later.
3
Who is affected by CVE-2022-23443?
CVE-2022-23443 affects users of Fortinet FortiSOAR versions 6.0.0 to 7.0.2 and 6.4.0 to 6.4.4.
4
What type of attack does CVE-2022-23443 allow?
CVE-2022-23443 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
5
Is CVE-2022-23443 a local or remote vulnerability?
CVE-2022-23443 is a remote vulnerability that can be exploited without authentication.