Arbitrary file read in FortiWeb and FortiRecorder
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2022-22297 |
| CWE-ID | CWE-20 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Fortinet FortiWeb Server applications / Remote management servers, RDP, SSH FortiRecorder Hardware solutions / Security hardware applicances |
| Vendor | Fortinet, Inc |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Input validation error
EUVDB-ID: #VU73216
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-22297
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a local user to read arbitrary files on the system.
The vulnerability exists due to insufficient validation of user-supplied input when handling arguments to CLI commands. A local user can supply a specially crafted argument and read contents of arbitrary files on the system through command line pipe.
Install updates from vendor's website.
Vulnerable software versionsFortinet FortiWeb: 6.0.0 - 6.4.1
FortiRecorder: 2.7.0 - 6.4.3
External linkshttp://fortiguard.com/psirt/FG-IR-21-218
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
