A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/psirt/FG-IR-22-355 |
History
Wed, 23 Oct 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2023-04-11T16:06:05.258Z
Updated: 2024-10-23T14:29:35.185Z
Reserved: 2022-09-23T15:07:35.782Z
Link: CVE-2022-41331
Vulnrichment
Updated: 2024-08-03T12:42:44.883Z
NVD
Status : Modified
Published: 2023-04-11T17:15:07.437
Modified: 2024-11-21T07:23:04.220
Link: CVE-2022-41331
Redhat
No data.