Fortinet FortiGate up to 6.4.1 Apple Push Notification Service cleartext storage

Summaryinfo

A vulnerability, which was classified as problematic, was found in Fortinet FortiGate up to 5.5.0/6.0.13/6.1/6.2.9/6.4.1. This vulnerability affects unknown code of the component Apple Push Notification Service/Google Cloud Messaging Service. Such manipulation leads to cleartext storage. This vulnerability is uniquely identified as CVE-2022-22302. Local access is required to approach this attack. No exploit exists.

Detailsinfo

A vulnerability was found in Fortinet FortiGate up to 5.5.0/6.0.13/6.1/6.2.9/6.4.1 (Firewall Software). It has been rated as problematic. Affected by this issue is some unknown functionality of the component Apple Push Notification Service/Google Cloud Messaging Service. The manipulation with an unknown input leads to a cleartext storage vulnerability. Using CWE to declare the problem leads to CWE-312. The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. Impacted is confidentiality. CVE summarizes:

A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and 6.0.0 through 6.0.13 and FortiAuthenticator version 5.5.0 and all versions of 6.1 and 6.0 may allow a local unauthorized party to retrieve the Fortinet private keys used to establish secure communication with both Apple Push Notification and Google Cloud Messaging services, via accessing the files on the filesystem.

The weakness was disclosed 07/11/2023. This vulnerability is handled as CVE-2022-22302 since 01/03/2022. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1555 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Firewall Software

Vendor

• Fortinet

Name

• FortiGate

Version

• 5.0
• 5.1
• 5.2
• 5.3
• 5.4
• 5.5.0
• 6.0
• 6.0.0
• 6.0.1
• 6.0.2
• 6.0.3
• 6.0.4
• 6.0.5
• 6.0.6
• 6.0.7
• 6.0.8
• 6.0.9
• 6.0.10
• 6.0.11
• 6.0.12
• 6.0.13
• 6.1
• 6.2.0
• 6.2.1
• 6.2.2
• 6.2.3
• 6.2.4
• 6.2.5
• 6.2.6
• 6.2.7
• 6.2.8
• 6.2.9
• 6.4.0
• 6.4.1

License

• commercial

Website

• Vendor: https://www.fortinet.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion