Sign-up

ID

VAR-202211-0062


CVE

CVE-2022-26119


TITLE

Fortinet FortiSIEM Authorization problem vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202211-1923

DESCRIPTION

A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password

Trust: 0.99

sources: NVD: CVE-2022-26119 // VULHUB: VHN-416880

AFFECTED PRODUCTS

vendor:fortinetmodel:fortisiemscope:eqversion:6.4.1

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:lteversion:6.1.2

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:eqversion:6.2.0

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:gteversion:5.1.0

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:gteversion:6.1.0

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:gteversion:5.3.0

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:eqversion:5.0.0

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:eqversion:5.4.0

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:lteversion:5.2.8

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:eqversion:5.2.2

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:gteversion:6.3.0

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:lteversion:6.3.3

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:eqversion:6.4.0

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:lteversion:5.1.3

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:eqversion:5.0.1

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:lteversion:5.3.3

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:eqversion:5.2.1

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:eqversion:6.2.1

Trust: 1.0

vendor:fortinetmodel:fortisiemscope:gteversion:5.2.5

Trust: 1.0

sources: NVD: CVE-2022-26119

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2022-26119
value: HIGH

Trust: 1.0

psirt@fortinet.com: CVE-2022-26119
value: HIGH

Trust: 1.0

CNNVD: CNNVD-202211-1923
value: HIGH

Trust: 0.6

NVD:
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 2.0

sources: NVD: CVE-2022-26119 // NVD: CVE-2022-26119 // CNNVD: CNNVD-202211-1923

PROBLEMTYPE DATA

problemtype:CWE-798

Trust: 1.0

problemtype:CWE-287

Trust: 0.1

sources: VULHUB: VHN-416880 // NVD: CVE-2022-26119

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202211-1923

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-202211-1923

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2022-26119

PATCH
title:Fortinet FortiSIEM Remediation measures for authorization problem vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqbyid.tag?id=213039
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-202211-1923

EXTERNAL IDS
db:NVDid:CVE-2022-26119
Trust: 1.7
db:CNNVDid:CNNVD-202211-1923
Trust: 0.6
db:VULHUBid:VHN-416880
Trust: 0.1
sources:
            
            
            VULHUB: VHN-416880 // 
            
            
            
            NVD: CVE-2022-26119 // 
            
            
            
            CNNVD: CNNVD-202211-1923

REFERENCES
url:https://fortiguard.com/psirt/fg-ir-22-064
Trust: 1.7
url:https://cxsecurity.com/cveshow/cve-2022-26119/
Trust: 0.6
sources:
            
            
            VULHUB: VHN-416880 // 
            
            
            
            NVD: CVE-2022-26119 // 
            
            
            
            CNNVD: CNNVD-202211-1923

SOURCES
db:VULHUBid:VHN-416880
db:NVDid:CVE-2022-26119
db:CNNVDid:CNNVD-202211-1923

LAST UPDATE DATE
2023-12-18T13:00:30.228000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-416880date:2022-11-03T00:00:00
db:NVDid:CVE-2022-26119date:2023-08-08T14:21:49.707
db:CNNVDid:CNNVD-202211-1923date:2022-11-04T00:00:00

SOURCES RELEASE DATE
db:VULHUBid:VHN-416880date:2022-11-02T00:00:00
db:NVDid:CVE-2022-26119date:2022-11-02T12:15:50.427
db:CNNVDid:CNNVD-202211-1923date:2022-11-02T00:00:00