CVEvulnerability

CVE-2022-33876

6.5 MEDIUM Published 2022-12-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-20

Description

Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests.

Affected configurations

• fortinet fortiadc (>= 5.1.0 <= 6.2.4) • fortinet fortiadc 7.0.0 • fortinet fortiadc 7.0.1 • fortinet fortiadc 7.0.2 • fortinet fortiadc 7.1.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References