A weak authentication vulnerability [CWE-1390] in... · CVE-2022-45860 · GitHub Advisory Database · GitHub

A weak authentication vulnerability [CWE-1390] in...

High severity Unreviewed Published May 4, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in device registration page may allow an unauthenticated attacker to perform password spraying attacks with an increased chance of success.

References

Published by the National Vulnerability Database

May 3, 2023

Published to the GitHub Advisory Database May 4, 2023

Last updated Apr 4, 2024

Weaknesses

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. Learn more on MITRE.

CWE-1390

Weak Authentication

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct. Learn more on MITRE.