CVE-2022-23443

An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests

High · published May 4, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:T/RC:C
CVSS v4.0
Not supplied
EPSS
0.01292 · 70.0th percentile
Published
2022-05-04T15:25Z
EPSS history
Timeline
  • 04 MAY 15:25Z
    An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests
    cvelistv5