Vulnerability Details CVE-2022-26117
An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.0%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2022-26117
-
cpe:2.3:a:fortinet:fortinac:8.3.7
-
cpe:2.3:a:fortinet:fortinac:8.5.0
-
cpe:2.3:a:fortinet:fortinac:8.5.1
-
cpe:2.3:a:fortinet:fortinac:8.5.2
-
cpe:2.3:a:fortinet:fortinac:8.5.4
-
cpe:2.3:a:fortinet:fortinac:8.6.0
-
cpe:2.3:a:fortinet:fortinac:8.6.2
-
cpe:2.3:a:fortinet:fortinac:8.6.3
-
cpe:2.3:a:fortinet:fortinac:8.6.4
-
cpe:2.3:a:fortinet:fortinac:8.6.5
-
cpe:2.3:a:fortinet:fortinac:8.7.0
-
cpe:2.3:a:fortinet:fortinac:8.7.1
-
cpe:2.3:a:fortinet:fortinac:8.7.2
-
cpe:2.3:a:fortinet:fortinac:8.7.3
-
cpe:2.3:a:fortinet:fortinac:8.7.4
-
cpe:2.3:a:fortinet:fortinac:8.7.5
-
cpe:2.3:a:fortinet:fortinac:8.7.6
-
cpe:2.3:a:fortinet:fortinac:8.8.0
-
cpe:2.3:a:fortinet:fortinac:8.8.1
-
cpe:2.3:a:fortinet:fortinac:8.8.10
-
cpe:2.3:a:fortinet:fortinac:8.8.11
-
cpe:2.3:a:fortinet:fortinac:8.8.2
-
cpe:2.3:a:fortinet:fortinac:8.8.3
-
cpe:2.3:a:fortinet:fortinac:8.8.4
-
cpe:2.3:a:fortinet:fortinac:8.8.5
-
cpe:2.3:a:fortinet:fortinac:8.8.6
-
cpe:2.3:a:fortinet:fortinac:8.8.7
-
cpe:2.3:a:fortinet:fortinac:8.8.8
-
cpe:2.3:a:fortinet:fortinac:8.8.9
-
cpe:2.3:a:fortinet:fortinac:9.1.0
-
cpe:2.3:a:fortinet:fortinac:9.1.1
-
cpe:2.3:a:fortinet:fortinac:9.1.2
-
cpe:2.3:a:fortinet:fortinac:9.1.3
-
cpe:2.3:a:fortinet:fortinac:9.1.4
-
cpe:2.3:a:fortinet:fortinac:9.1.5
-
cpe:2.3:a:fortinet:fortinac:9.2.0
-
cpe:2.3:a:fortinet:fortinac:9.2.1
-
cpe:2.3:a:fortinet:fortinac:9.2.2
-
cpe:2.3:a:fortinet:fortinac:9.2.3