VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2022/45xxx/CVE-2022-45856.json
T

355 lines
16 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2022-45856",
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"state": "PUBLISHED",
"assignerShortName": "fortinet",
"dateReserved": "2022-11-23T14:57:05.612Z",
"datePublished": "2024-09-10T14:37:48.663Z",
"dateUpdated": "2024-09-10T19:01:23.813Z"
},
"containers": {
"cna": {
"affected": [
{
"vendor": "Fortinet",
"product": "FortiClientiOS",
"cpes": [
"cpe:2.3:a:fortinet:forticlientios:7.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:7.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:7.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:7.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:7.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:7.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:6.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:6.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.6.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.6.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.6.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.2.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.2.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:5.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:4.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:4.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:4.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:2.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:forticlientios:2.0.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"versions": [
{
"versionType": "semver",
"version": "7.0.3",
"lessThanOrEqual": "7.0.6",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.0.0",
"lessThanOrEqual": "7.0.1",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.0.0",
"lessThanOrEqual": "6.0.1",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.6.5",
"lessThanOrEqual": "5.6.6",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.6.0",
"lessThanOrEqual": "5.6.1",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.4.3",
"lessThanOrEqual": "5.4.4",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.4.0",
"lessThanOrEqual": "5.4.1",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.2.0",
"lessThanOrEqual": "5.2.3",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.0.0",
"lessThanOrEqual": "5.0.3",
"status": "affected"
},
{
"versionType": "semver",
"version": "4.0.0",
"lessThanOrEqual": "4.0.2",
"status": "affected"
},
{
"versionType": "semver",
"version": "2.0.0",
"lessThanOrEqual": "2.0.1",
"status": "affected"
}
]
},
{
"vendor": "Fortinet",
"product": "FortiClientAndroid",
"cpes": [],
"defaultStatus": "unaffected",
"versions": [
{
"version": "7.2.0",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.0.6",
"lessThanOrEqual": "7.0.7",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.0.2",
"lessThanOrEqual": "7.0.3",
"status": "affected"
},
{
"version": "7.0.0",
"status": "affected"
},
{
"version": "6.4.6",
"status": "affected"
},
{
"version": "6.4.4",
"status": "affected"
},
{
"version": "6.4.1",
"status": "affected"
},
{
"version": "6.0.0",
"status": "affected"
},
{
"version": "5.6.0",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.4.0",
"lessThanOrEqual": "5.4.2",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.2.0",
"lessThanOrEqual": "5.2.8",
"status": "affected"
},
{
"versionType": "semver",
"version": "5.0.0",
"lessThanOrEqual": "5.0.3",
"status": "affected"
}
]
},
{
"vendor": "Fortinet",
"product": "FortiClientMac",
"cpes": [],
"defaultStatus": "unaffected",
"versions": [
{
"versionType": "semver",
"version": "7.2.0",
"lessThanOrEqual": "7.2.4",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.0.0",
"lessThanOrEqual": "7.0.13",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.4.0",
"lessThanOrEqual": "6.4.10",
"status": "affected"
}
]
},
{
"vendor": "Fortinet",
"product": "FortiClientLinux",
"cpes": [],
"defaultStatus": "unaffected",
"versions": [
{
"versionType": "semver",
"version": "7.2.0",
"lessThanOrEqual": "7.2.4",
"status": "affected"
},
{
"versionType": "semver",
"version": "7.0.0",
"lessThanOrEqual": "7.0.13",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.4.7",
"lessThanOrEqual": "6.4.9",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.4.0",
"lessThanOrEqual": "6.4.4",
"status": "affected"
}
]
},
{
"vendor": "Fortinet",
"product": "FortiClientWindows",
"cpes": [],
"defaultStatus": "unaffected",
"versions": [
{
"versionType": "semver",
"version": "7.0.0",
"lessThanOrEqual": "7.0.7",
"status": "affected"
},
{
"versionType": "semver",
"version": "6.4.0",
"lessThanOrEqual": "6.4.10",
"status": "affected"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientLinux 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientAndroid 6.4 all versions, 7.0 all versions, 7.2.0 and FortiClientiOS 5.6 all versions, 6.0.0 through 6.0.1, 7.0.0 through 7.0.6 SAML SSO feature may allow an unauthenticated attacker to man-in-the-middle the communication between the FortiClient and  both the service provider and the identity provider."
}
],
"providerMetadata": {
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"shortName": "fortinet",
"dateUpdated": "2024-09-10T14:37:48.663Z"
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-295",
"description": "Information disclosure",
"type": "CWE"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C"
}
}
],
"solutions": [
{
"lang": "en",
"value": "Please upgrade to FortiClientAndroid version 7.2.1 or above \nPlease upgrade to FortiClientiOS version 7.0.7 or above \nPlease upgrade to FortiClientMac version 7.4.0 or above \nPlease upgrade to FortiClientMac version 7.2.5 or above \nPlease upgrade to FortiClientLinux version 7.4.0 or above \nPlease upgrade to FortiClientLinux version 7.2.5 or above \nPlease upgrade to FortiClientWindows version 7.2.0 or above \nPlease upgrade to FortiClientWindows version 7.0.8 or above"
}
],
"references": [
{
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-22-230",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-22-230"
}
]
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2024-09-10T19:01:07.692905Z",
"id": "CVE-2022-45856",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-09-10T19:01:23.813Z"
}
}
]
}
}
View Git Blame Copy Permalink