UpHeron
All vulnerabilities

Servers and applications

CVE-2022-22305

An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.

Severity
Medium 4.2
Published
1 Sept 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiSandboxServers and applications · cpe:a:fortinet:fortisandbox
  • Version 4.0.2
  • Version 4.0.1
  • Version 4.0.0
  • From 3.2.0 up to 3.2.4
All 7 release lines
  • From 3.0.0 up to 3.0.7
  • Version 3.0.1
  • From 3.1.0 up to 3.1.5
  • From 3.2.0 up to 3.2.4
  • Version 4.0.0
  • Version 4.0.1
  • Version 4.0.2
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • From 5.6.10 up to 5.6.14
  • From 6.0.0 up to 6.0.17
  • From 6.2.0 up to 6.2.15

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-22305
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-22305