CVE-2022-42473: Medium severity Fortinet FortiSOAR vulnerability
A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose information via logging into the database using a privileged account without a password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-42473?
CVE-2022-42473 has a high severity rating due to its potential for unauthorized access to critical functions.
How do I fix CVE-2022-42473?
To fix CVE-2022-42473, update Fortinet FortiSOAR to the latest version that addresses this vulnerability.
What are the affected versions for CVE-2022-42473?
CVE-2022-42473 affects FortiSOAR versions 6.4.0 to 6.4.4, 7.0.0 to 7.0.3, and exactly 7.2.0.
What type of vulnerability is CVE-2022-42473?
CVE-2022-42473 is classified as a missing authentication vulnerability in a critical function.
Can CVE-2022-42473 lead to data disclosure?
Yes, CVE-2022-42473 can allow attackers to disclose sensitive information by logging into the database without a password.