What’s Vulnerable › Vulnerabilities
CVE-2022-41327
- Severity: medium (CVSS 4.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-06-13 · updated 2026-06-17
- Weakness: CWE-319
Description
A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in order to obtain other adminstrators cookies via diagnose CLI commands.
Affected products
- Fortinet FortiOS (FortiGate): from 7.0.0 through 7.0.8; from 7.2.0 through 7.2.4
- Fortinet FortiProxy: from 7.0.0 through 7.0.7; 7.2.0, 7.2.1
References
Get alerted when CVE-2022-41327 or the next vulnerability affects your stack