CVE-2022-41329

No fix known EPSS <1%CVSS 5.2

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations on the device via crafted HTTP GET requests.

Published 2023-03-07 · CVE record · OSV

Products: Fortinet FortiProxy, Fortinet FortiOS