CVE-2022-41331

9.8CRITICAL

A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and Mon

게시됨: 4/11/2023업데이트됨: 11/21/2024
NVD에서 보기MITRE에서 보기

설명

A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests.

AI 분석AI 기반

영향받는 제품

fortinetfortiproxy

참조