CVE-2022-38375
First published: Thu Feb 16 2023(Updated: )
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiNAC | >=9.2.0<9.2.7 | |
| Fortinet FortiNAC | >=9.4.0<9.4.2 | |
| Fortinet Fortinac-f | <7.2.0 |
Remedy
Please upgrade to FortiNAC-F version 7.2.0 or above Please upgrade to FortiNAC version 9.4.2 or above Please upgrade to FortiNAC version 9.2.7 or above
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-38375?
CVE-2022-38375 is an improper authorization vulnerability in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6.
How does CVE-2022-38375 impact Fortinet FortiNAC?
CVE-2022-38375 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.
Which versions of Fortinet FortiNAC are affected by CVE-2022-38375?
Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 are affected by CVE-2022-38375.
What is the severity of CVE-2022-38375?
CVE-2022-38375 has a severity rating of 9.8 (critical).
How can I fix CVE-2022-38375 in Fortinet FortiNAC?
To fix CVE-2022-38375, upgrade Fortinet FortiNAC to version 9.2.7 or higher.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/references
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/fortinet
- canonical/fortinet fortinac
- version/fortinet fortinac/9.2.0
- version/fortinet fortinac/9.4.0
- canonical/fortinet fortinac-f