CVE-2022-45857

—

CVSS 3.1

7.5 high

EPSS

<1%p23

Published

Jan 5, 2023 (Jan 5, 2023)

Modified

Jun 17, 2026

Description

An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.

Vendors: fortinet
Products: fortimanager
Weakness: CWE-286
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.