CVE-2022-26117
First published: Mon Jul 18 2022(Updated: )
An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiNAC | >=8.5.0<=8.5.2 | |
| Fortinet FortiNAC | >=8.6.2<=8.6.5 | |
| Fortinet FortiNAC | >=8.7.0<=8.7.6 | |
| Fortinet FortiNAC | >=8.8.0<=8.8.11 | |
| Fortinet FortiNAC | >=9.1.0<9.1.6 | |
| Fortinet FortiNAC | >=9.2.0<9.2.4 | |
| Fortinet FortiNAC | =8.3.7 | |
| Fortinet FortiNAC | =8.5.4 | |
| Fortinet FortiNAC | =8.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/fortinet
- canonical/fortinet fortinac
- version/fortinet fortinac/8.5.0
- version/fortinet fortinac/8.5.2
- version/fortinet fortinac/8.6.2
- version/fortinet fortinac/8.6.5
- version/fortinet fortinac/8.7.0
- version/fortinet fortinac/8.7.6
- version/fortinet fortinac/8.8.0
- version/fortinet fortinac/8.8.11
- version/fortinet fortinac/9.1.0
- version/fortinet fortinac/9.2.0
- version/fortinet fortinac/8.3.7
- version/fortinet fortinac/8.5.4
- version/fortinet fortinac/8.6.0