| IR Number | FG-IR-18-232 |
| Date | Mar 7, 2023 |
| Severity |
Medium |
| CVSSv3 Score | 5.1 |
| Impact | Information disclosure |
| CVE ID | CVE-2022-27490 |
| Affected Products |
FortiManager
:
6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.11, 5.6.10, 5.6.1, 5.6.0
FortiAnalyzer
:
6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.11, 5.6.10, 5.6.1, 5.6.0
FortiPortal
:
6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.3.8, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.2, 5.1.1, 5.1.0, 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.2.2, 4.2.1, 4.2.0, 4.1.2, 4.1.1, 4.1.0
FortiSwitch
:
7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.10, 6.4.1, 6.4.0, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiManager, FortiAnalyzer, FortiPortal & FortiSwitch - Information disclosure through diagnose debug commands
Summary
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager, FortiAnalyzer, FortiPortal & FortiSwitch may allow an attacker which has obtained access to a restricted administrative account to obtain sensitive information via `diagnose debug` commands.
Affected Products
At least
FortiManager version 6.0.0 through 6.0.4
At least
FortiAnalyzer version 6.0.0 through 6.0.4
At least
FortiPortal 4.1 all versions
FortiPortal 4.2 all versions
FortiPortal 5.0 all versions
FortiPortal 5.1 all versions
FortiPortal 5.2 all versions
FortiPortal 5.3 all versions
FortiPortal version 6.0.0 through 6.0.9
At least
FortiSwitch version 6.0.0 through 6.0.7
FortiSwitch version 6.2.0 through 6.2.7
FortiSwitch version 6.4.0 through 6.4.10
FortiSwitch version 7.0.0 through 7.0.4
Solutions
Upgrade to FortiManager version 6.0.5 and above,
Upgrade to FortiManager version 6.2.0 and above.
Upgrade to FortiAnalyzer version 6.0.5 and above,
Upgrade to FortiAnalyzer version 6.2.0 and above.
Upgrade to FortiPortal version 6.0.10 and above.
Upgrade to FortiSwitch version 6.4.11 and above,
Upgrade to FortiSwitch version 7.0.5 and above.