CVE-2022-41327

4.4 mediumEPSS 0.1%

Medium (4.4) in fortinet. EPSS 0.1% chance of exploitation in the next 30 days.

A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in order to obtain other adminstrators cookies via diagnose CLI commands.

Severity

CVSS 3.1

4.4 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2023-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios
fortinet:fortiproxy

References

https://fortiguard.com/psirt/FG-IR-22-380
https://fortiguard.com/psirt/FG-IR-22-380

Check your stack JSON