← Database

CVE-2022-38375

CRITICAL CVSS: 9.1 Published: 2023-02-16 Modified: 2026-06-17

Description

An improper authorization vulnerability [CWE-285]  in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.

Affected Platforms

Fortinet Fortinac-FFortinet Fortinac

Weakness Type

CWE-285, NVD-CWE-Other

References