What is CVE-2022-41327?

CVE-2022-41327 is a high-severity vulnerability in Fortinet Fortios, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.8/10. Published 2023-06-13.

How severe is CVE-2022-41327?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Fortinet Fortios

CVE-2022-41327

A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in order to obtain other adminstrators cookies via diagnose CLI commands.

EPSS: 0.001 (2.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortinet Fortios — versions 7.2.0, 7.0.0
Fortinet Fortiproxy — versions 7.0.0, 7.2.1, 7.2.0

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-41327?: CVE-2022-41327 is a high-severity vulnerability in Fortinet Fortios, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.8/10. Published 2023-06-13.
How severe is CVE-2022-41327?: High severity. CVSS v3 base score is 7.8 out of 10.