CVE-2022-22297

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://fortiguard.com/psirt/FG-IR-21-218	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:a:fortinet:fortiweb::::::::
	cpe:2.3:o:fortinet:fortirecorder_firmware::::::::
	cpe:2.3:o:fortinet:fortirecorder_firmware::::::::
	cpe:2.3:o:fortinet:fortirecorder_firmware::::::::

History

14 Mar 2023, 19:57

Type	Values Removed	Values Added
CWE		NVD-CWE-Other
References	~~(MISC) https://fortiguard.com/psirt/FG-IR-21-218 -~~	(MISC) https://fortiguard.com/psirt/FG-IR-21-218 - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
CPE		cpe:2.3:o:fortinet:fortirecorder_firmware:::::::: cpe:2.3:a:fortinet:fortiweb::::::::

07 Mar 2023, 17:55

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-03-07 17:15

Updated : 2024-02-04 23:14

NVD link : CVE-2022-22297

Mitre link : CVE-2022-22297

CVE.ORG link : CVE-2022-22297

JSON object : View

Products Affected

fortinet

fortiweb
fortirecorder_firmware

CWE

NVD-CWE-Other CWE-792

Incomplete Filtering of One or More Instances of Special Elements

{"id": "CVE-2022-22297", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2023-03-07T17:15:11.707", "references": [{"url": "https://fortiguard.com/psirt/FG-IR-21-218", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-792"}]}], "descriptions": [{"lang": "en", "value": "An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments."}], "lastModified": "2023-11-07T03:43:51.413", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA69D7D6-9798-4E8C-983A-6632D665175C", "versionEndIncluding": "6.0.8", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAA01761-B03C-498C-8749-CD1289E37A08", "versionEndIncluding": "6.1.3", "versionStartIncluding": "6.1.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DBCF4EF-986E-4F59-8D6D-01AB0D783091", "versionEndIncluding": "6.2.7", "versionStartIncluding": "6.2.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A846394C-F57F-432B-AEE0-F2FB576A55FA", "versionEndIncluding": "6.3.17", "versionStartIncluding": "6.3.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF5ED7B3-39F3-49FD-82D9-72CAB2D68636", "versionEndIncluding": "6.4.3", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D08AB84-92D4-4E2E-A1C6-F6C9856E81B4", "versionEndIncluding": "2.7.7", "versionStartIncluding": "2.7.0"}, {"criteria": "cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CE6D7BA-0B60-42EF-BDE0-1E548794C145", "versionEndIncluding": "6.0.12", "versionStartIncluding": "6.0.0"}, {"criteria": "cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E50EDA13-6FCE-4D96-9B3B-80D3B5814202", "versionEndIncluding": "6.4.3", "versionStartIncluding": "6.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}