Tracker / CVE-2022-26122
CVE-2022-26122
Medium 4.7
An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64.
Affected products and versions
| fortinet | antivirus_engine |
|---|---|
| fortinet | fortimail |
| fortinet | fortimail · 6.0.0 → 6.0.12 |
| fortinet | fortimail · 6.2.0 → 6.2.9 |
| fortinet | fortimail · 6.4.0 → 6.4.6 |
| fortinet | fortimail · 7.0.0 → 7.0.2 |
| fortinet | fortios |
| fortinet | fortios · 6.0.0 → 6.0.15 |
| fortinet | fortios · 6.2.0 → 6.2.11 |
| fortinet | fortios · 6.4.0 → 6.4.10 |
| fortinet | fortios · 7.0.0 → 7.0.6 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.