CVE-2022-42477

Description

An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.

Reserved 2022-10-07 | Published 2023-04-11 | Updated 2024-10-23 | Assigner fortinet

Problem types

Information disclosure

Product status

Default status
unaffected

7.2.0
affected

7.0.0
affected

6.4.0
affected

References

fortiguard.com/psirt/FG-IR-22-432

cve.org (CVE-2022-42477)

nvd.nist.gov (CVE-2022-42477)

Download JSON