A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions,
8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.
References
| Link | Resource |
|---|---|
| https://fortiguard.com/psirt/FG-IR-22-407 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 May 2023, 17:51
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-601 | |
| References | (MISC) https://fortiguard.com/psirt/FG-IR-22-407 - Vendor Advisory | |
| First Time |
Fortinet fortinac
Fortinet fortinac-f Fortinet |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.7 |
| CPE | cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:* |
03 May 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-03 22:15
Updated : 2023-12-10 15:01
NVD link : CVE-2022-43950
Mitre link : CVE-2022-43950
CVE.ORG link : CVE-2022-43950
JSON object : View
Products Affected
fortinet
- fortinac
- fortinac-f
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')