CVE-2022-41329: Infoleak

Q: What is CVE-2022-41329?

CVE-2022-41329 is an exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiProxy and FortiOS.

Q: How does CVE-2022-41329 affect Fortinet FortiProxy?

CVE-2022-41329 affects Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7.

Q: How does CVE-2022-41329 affect Fortinet FortiOS?

CVE-2022-41329 affects Fortinet FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9.

Q: What is the severity of CVE-2022-41329?

CVE-2022-41329 has a severity score of 5.3 (Medium).

Q: How can I fix CVE-2022-41329?

To fix CVE-2022-41329, update Fortinet FortiProxy to version 7.2.2 or higher and update Fortinet FortiOS to version 7.2.3 or higher.

Published Mar 7, 2023

Updated

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations on the device via crafted HTTP GET requests.

Affected Software

6 affected components

Fortinet FortiProxy>=7.0.0<=7.0.8

Fortinet FortiProxy>=7.2.0<=7.2.2

Fortinet FortiOS>=6.2.3<=6.2.13

Fortinet FortiOS>=6.4.0<=6.4.11

Fortinet FortiOS>=7.0.0<=7.0.9

Fortinet FortiOS>=7.2.0<=7.2.3

Remediation

Information

Please upgrade to FortiProxy version 7.2.2 or above Please upgrade to FortiProxy version 7.0.8 or above Please upgrade to FortiOS version 7.2.4 or above Please upgrade to FortiOS version 7.0.10 or above Please upgrade to FortiOS version 6.4.11 or above

Event History

Mar 7, 2023

CVE Published

via MITRE·04:22 PM

Data Sourced

via MITRE·04:22 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-41329?

CVE-2022-41329 is an exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiProxy and FortiOS.

How does CVE-2022-41329 affect Fortinet FortiProxy?