Improper input validation in Fortinet Fortiadc
CVE-2022-33876
Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.007 (50.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.
Affected products
- Fortinet Fortiadc — versions 5.2.0, 5.4.0, 5.3.0
Weakness classification (CWE)
References
- psirt@fortinet.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-33876?
- CVE-2022-33876 is a medium-severity vulnerability in Fortinet Fortiadc, classified under Improper Input Validation. CVSS score: 5.4/10. Published 2022-12-06.
- How severe is CVE-2022-33876?
- Medium severity. CVSS v3 base score is 5.4 out of 10.