CVE-2022-30305lowCWE-778

CVE-2022-30305: falha de baixa gravidade em Fortinet FortiSandbox

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FortiSandbox+ Monitorar FortiDeceptor

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.6epss 0.7%
An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no limit on the number of failed authentication attempts.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:X/RC:C
Produtos afetados
Fortinet · FortiDeceptorFortinet · FortiSandbox
CVEs relacionadas — Fortinet FortiSandbox

No mesmo produto, das mais perigosas para as menos.

CVE-2026-39808CRITICALCVE-2026-39808EPSS 93.2%KEVCVE-2026-25089CRITICALCVE-2026-25089EPSS 76.1%KEVCVE-2024-27781MEDIUMCVE-2024-27781EPSS 28.2%CVE-2026-39813CRITICALCVE-2026-39813EPSS 22.2%CVE-2025-53949HIGHCVE-2025-53949EPSS 17.2%CVE-2025-53679MEDIUMCVE-2025-53679EPSS 12.2%