CVE-2022-26119

Description

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password.

Reserved 2022-02-25 | Published 2022-11-02 | Updated 2024-10-25 | Assigner fortinet

Problem types

Improper access control

Product status

FortiSIEM 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 5.4.0, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.2, 5.2.1, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.1, 5.0.0
affected

References

fortiguard.com/psirt/FG-IR-22-064

cve.org (CVE-2022-26119)

nvd.nist.gov (CVE-2022-26119)

Download JSON