VULNERABILITY INTELLIGENCE
CVE-2022-29053
CVSS score2.3 LOW
EPSS probability0.27%
CISA KEVNot currently listed
Published2022-09-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Description
A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an attacker in possession of the encrypted file to decipher it.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- psirt@fortinet.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory