Description
Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 1 Nov 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.