Security Advisory
CVE-2022-38375
9.1
CRITICAL
Vulnerability Description
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests.
Published Date
February 16, 2023
Official Source
NIST NVD Advisory