CVE-2022-27484: Medium severity fortinet fortiadc vulnerability
Published Aug 3, 2022
·Updated
A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.
Affected Software
1 affected component
Fortinet FortiADC>=5.0.0<6.2.4
Event History
Aug 3, 2022
CVE Published
via MITRE·01:20 PM
Data Sourced
via MITRE·01:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this Fortinet FortiADC vulnerability?
The vulnerability ID is CVE-2022-27484.
2
What is the severity of CVE-2022-27484?
The severity of CVE-2022-27484 is medium (4.3).
3
What is the affected software version range for CVE-2022-27484?
The affected software versions range from 6.2.0 through 6.2.3, 6.1.x, 6.0.x, and 5.x.x.
4
How does CVE-2022-27484 work?
CVE-2022-27484 allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.
5
Is there a fix available for CVE-2022-27484?
Yes, upgrading to version 6.2.4 or higher of Fortinet FortiADC resolves the vulnerability.