Vulnerability Details CVE-2022-26117
An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.4%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2022-26117
-
cpe:2.3:a:fortinet:fortinac:8.3.7
-
cpe:2.3:a:fortinet:fortinac:8.5.0
-
cpe:2.3:a:fortinet:fortinac:8.5.1
-
cpe:2.3:a:fortinet:fortinac:8.5.2
-
cpe:2.3:a:fortinet:fortinac:8.5.4
-
cpe:2.3:a:fortinet:fortinac:8.6.0
-
cpe:2.3:a:fortinet:fortinac:8.6.2
-
cpe:2.3:a:fortinet:fortinac:8.6.3
-
cpe:2.3:a:fortinet:fortinac:8.6.4
-
cpe:2.3:a:fortinet:fortinac:8.6.5
-
cpe:2.3:a:fortinet:fortinac:8.7.0
-
cpe:2.3:a:fortinet:fortinac:8.7.1
-
cpe:2.3:a:fortinet:fortinac:8.7.2
-
cpe:2.3:a:fortinet:fortinac:8.7.3
-
cpe:2.3:a:fortinet:fortinac:8.7.4
-
cpe:2.3:a:fortinet:fortinac:8.7.5
-
cpe:2.3:a:fortinet:fortinac:8.7.6
-
cpe:2.3:a:fortinet:fortinac:8.8.0
-
cpe:2.3:a:fortinet:fortinac:8.8.1
-
cpe:2.3:a:fortinet:fortinac:8.8.10
-
cpe:2.3:a:fortinet:fortinac:8.8.11
-
cpe:2.3:a:fortinet:fortinac:8.8.2
-
cpe:2.3:a:fortinet:fortinac:8.8.3
-
cpe:2.3:a:fortinet:fortinac:8.8.4
-
cpe:2.3:a:fortinet:fortinac:8.8.5
-
cpe:2.3:a:fortinet:fortinac:8.8.6
-
cpe:2.3:a:fortinet:fortinac:8.8.7
-
cpe:2.3:a:fortinet:fortinac:8.8.8
-
cpe:2.3:a:fortinet:fortinac:8.8.9
-
cpe:2.3:a:fortinet:fortinac:9.1.0
-
cpe:2.3:a:fortinet:fortinac:9.1.1
-
cpe:2.3:a:fortinet:fortinac:9.1.2
-
cpe:2.3:a:fortinet:fortinac:9.1.3
-
cpe:2.3:a:fortinet:fortinac:9.1.4
-
cpe:2.3:a:fortinet:fortinac:9.1.5
-
cpe:2.3:a:fortinet:fortinac:9.2.0
-
cpe:2.3:a:fortinet:fortinac:9.2.1
-
cpe:2.3:a:fortinet:fortinac:9.2.2
-
cpe:2.3:a:fortinet:fortinac:9.2.3