Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2022-23439
CVE-2022-23439:
FortiOS vulnerability analysis and mitigation
Overview
A vulnerability identified as CVE-2022-23439 was discovered in multiple Fortinet products, classified as an externally controlled reference to a resource in another sphere vulnerability [CWE-610]. The vulnerability affects various Fortinet products including FortiOS, FortiProxy, FortiMail, FortiSwitch, FortiVoice, FortiNDR, FortiWLC, FortiADC, FortiAuthenticator, and several others across multiple versions (Fortiguard PSIRT, CVE Mitre).
Technical details
The vulnerability allows an unauthenticated attacker to poison web caches between the device and the attacker through crafted HTTP requests, where the Host header points to an arbitrary webserver. The vulnerability has been assigned a CVSS v3 score of 4.1, indicating medium severity (Fortiguard PSIRT).
Impact
If successfully exploited, this vulnerability could lead to improper access control, potentially allowing attackers to manipulate web cache content between the device and users (Fortiguard PSIRT).
Mitigation and workarounds
Fortinet has released multiple security updates to address this vulnerability. Users are advised to upgrade to the latest versions of affected products. For FortiOS, upgrades to version 7.0.6 and above or 7.2.1 and above are recommended. Additionally, specific configuration changes are required, such as setting the admin-host property to the device hostname to disable Host redirection. Similar upgrade paths and configuration changes are recommended for other affected products (Fortiguard PSIRT).
Community reactions
The vulnerability was internally reported and discovered by Théo Leleu of the Fortinet Product Security team (Fortiguard PSIRT).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management