All vulnerabilities

Servers and applications

CVE-2022-22302

A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and 6.0.0 through 6.0.13 and FortiAuthenticator version 5.5.0 and all versions of 6.1 and 6.0 may allow a local unauthorized party to retrieve the Fortinet private keys used to establish secure communication with both Apple Push Notification and Google Cloud…

Severity
Low 3.3
Published
11 Jul 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • From 6.0.0 up to 6.0.13
  • From 6.2.0 up to 6.2.9
  • Version 6.4.0
  • Version 6.4.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-22302
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-22302