CVE-2022-40684 PoC — Fortinet FortiOS 授权问题漏洞

Source

https://github.com/Rofell0s/Fortigate-Leak-CVE-2022-40684

Associated Vulnerability

Title: Fortinet FortiOS 授权问题漏洞 (CVE-2022-40684)
Description:An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Readme

# Fortigate-Leak-CVE-2022-40684
Liste des IPs affectées par la CVE-2022-40684 FortiOS, FortiProxy, et FortiSwitchManager

Recommendation Forti:
https://www.fortinet.com/blog/psirt-blogs/update-regarding-cve-2022-40684

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →