CVE-2022-29060

—

CVSS 3.1

8.1 high

EPSS

<1%p49

Published

Jul 19, 2022 (Jul 19, 2022)

Modified

Jun 17, 2026

Description

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retrieve the key from one device to sign JWT tokens for any device.

Vendors: fortinet
Products: fortiddos
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.