How severe is CVE-2022-26121?

CVE-2022-26121 has a CVSS v3 score of 3.7 (LOW).

CVE-2022-26121

Name: fortimanager
Author: fortinet

3.7LOW

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through

Published: 10/10/2022Updated: 11/21/2024

Description

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via referencing the name in the URL path.

AI AnalysisPowered by AI

Affected Products

fortinetfortimanager

fortinetfortianalyzer

References

https://fortiguard.com/psirt/FG-IR-22-026
Vendor Advisory
https://fortiguard.com/psirt/FG-IR-22-026
Vendor Advisory