CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.8. It affects FortiGate. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-22303
Severity
LOW
CVSS
2.8
EPSS
0.21%
FortiGate
Original NVD Description
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file.
Related CVEs
Other vulnerabilities affecting the same vendor(s)