What is CVE-2022-29060?

CVE-2022-29060 is a high-severity vulnerability in Fortinet Fortiddos, classified under Use of Hard-coded Credentials. CVSS score: 8.1/10. Published 2022-07-19.

How severe is CVE-2022-29060?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Fortinet Fortiddos

CVE-2022-29060

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retrieve the key from one device to sign JWT to…

EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortinet Fortiddos — versions 5.1.0, 5.2.0, 5.3.0
Fortinet Fortiddos — versions FortiDDoS 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

psirt@fortinet.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-29060?: CVE-2022-29060 is a high-severity vulnerability in Fortinet Fortiddos, classified under Use of Hard-coded Credentials. CVSS score: 8.1/10. Published 2022-07-19.
How severe is CVE-2022-29060?: High severity. CVSS v3 base score is 8.1 out of 10.