UpHeron
All vulnerabilities

Servers and applications

CVE-2022-22306

An improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0 through 6.2.10, 6.4.0 through 6.4.8, 7.0.0 may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the FortiGate and some peers such as private SDNs and external cloud platforms.

Severity
Medium 5.3
Published
24 May 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.4.9
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • From 6.0.0 up to 6.0.14
  • From 6.2.0 up to 6.2.10
  • From 6.4.0 before 6.4.9
  • Version 7.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-22306
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-22306