CVE-2022-29053

LOW

2.3

Description

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an attacker in possession of the encrypted file to decipher it.

CVE Details

CVSS v3.1 Score2.3

SeverityLOW

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published9/6/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

fortinet:fortios

References

https://fortiguard.com/psirt/FG-IR-22-158(psirt@fortinet.com)

https://fortiguard.com/psirt/FG-IR-22-158(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.