CVE-2022-22300
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through 6.0.11, FortiAnalyzer version 6.2.0 through 6.2.9, FortiAnalyzer version 6.4.0 through 6.4.7, FortiAnalyzer version 7.0.0 through 7 .0.2, FortiManager version 5.6.0 through 5.6.11, FortiManager version 6.0.0 through 6.0.11, FortiManager version 6.2.0 through 6.2.9, FortiManager version 6.4.0 through 6.4.7, FortiManager version 7.0.0 through 7.0.2 allows attacker to bypass the device policy and force the password-change action for its user.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortimanager | 5.6.0 | 5.6.11.x |
| fortinet / fortimanager | 6.0.0 | 6.0.11.x |
| fortinet / fortimanager | 6.4.0 | 6.4.7.x |
| fortinet / fortimanager | 6.2.0 | 6.2.9.x |
| fortinet / fortianalyzer | 6.4.0 | 6.4.7.x |
| fortinet / fortianalyzer | 6.2.0 | 6.2.9.x |
| fortinet / fortianalyzer | 6.0.0 | 6.0.11.x |
| fortinet / fortianalyzer | 5.6.0 | 5.6.11.x |
| fortinet / fortianalyzer | 7.0.0 | 7.0.3 |
| fortinet / fortimanager | 7.0.0 | 7.0.3 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime