CVE-2022-33876: Input Validation
Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-33876?
CVE-2022-33876 is a vulnerability in Fortinet FortiADC version 7.1.0 and below that allows an authenticated attacker to retrieve files with specific extensions from the underlying Linux system through crafted HTTP requests.
Which versions of Fortinet FortiADC are affected by CVE-2022-33876?
Fortinet FortiADC versions 7.1.0, 7.0.0 through 7.0.2, and 6.2.4 and below are affected by CVE-2022-33876.
What is the severity of CVE-2022-33876?
CVE-2022-33876 has a severity score of 6.5 (medium).
How can an attacker exploit CVE-2022-33876?
An authenticated attacker can exploit CVE-2022-33876 by sending crafted HTTP requests to retrieve files with specific extensions from the underlying Linux system.
Are there any references available for CVE-2022-33876?
Yes, you can find more information about CVE-2022-33876 at the following reference: https://fortiguard.com/psirt/FG-IR-22-253