CVE-2022-45858

Published: May 3, 2023Modified: Jun 17, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks.

Affected (3)

Products: Fortinet: Fortinac

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortinac	From 8.7.0 to 9.1.0
Fortinet Fortinac	From 9.2.0 to 9.2.6
Fortinet Fortinac	From 9.4.0 to 9.4.2

Related CWEs

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

https://fortiguard.com/psirt/FG-IR-22-452

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-22-452

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.