CVE-2022-26119

Published: Nov 2, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.

Affected (14)

Products: Fortinet: Fortisiem

Fortinet

1 product

Fortisiem

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortisiem	From 5.1.0 to 5.1.3
Fortinet Fortisiem	From 5.2.5 to 5.2.8
Fortinet Fortisiem	From 5.3.0 to 5.3.3
Fortinet Fortisiem	From 6.1.0 to 6.1.2
Fortinet Fortisiem	From 6.3.0 to 6.3.3
Fortinet Fortisiem	Version 5.0.0
Fortinet Fortisiem	Version 5.0.1
Fortinet Fortisiem	Version 5.2.1
Fortinet Fortisiem	Version 5.2.2
Fortinet Fortisiem	Version 5.4.0
Fortinet Fortisiem	Version 6.2.0
Fortinet Fortisiem	Version 6.2.1
Fortinet Fortisiem	Version 6.4.0
Fortinet Fortisiem	Version 6.4.1

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://fortiguard.com/psirt/FG-IR-22-064

Source: psirt@fortinet.com

PatchVendor Advisory

https://fortiguard.com/psirt/FG-IR-22-064

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.