{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"FortiMail versions ant\u00e9rieures \u00e0 7.0.4","product":{"name":"FortiMail","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAP-W2 versions 7.0.x ant\u00e9rieures \u00e0 7.0.4","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiManager versions 7.2.x ant\u00e9rieures \u00e0 7.2.1","product":{"name":"FortiManager","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS versions 7.2.x ant\u00e9rieures \u00e0 7.2.1","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiManager versions 7.0.x ant\u00e9rieures \u00e0 7.0.4","product":{"name":"FortiManager","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiManager versions 6.x ant\u00e9rieures \u00e0 6.4.8","product":{"name":"FortiManager","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAP-W2 versions 6.x ant\u00e9rieures \u00e0 6.4.8","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAP-S versions 6.x ant\u00e9rieures \u00e0 6.4.8","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAP-W2 versions 7.2.x ant\u00e9rieures \u00e0 7.2.1","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiWeb versions ant\u00e9rieures \u00e0 7.0.2","product":{"name":"FortiWeb","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAP versions 7.2.x ant\u00e9rieures \u00e0 7.2.1","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAnalyzer versions 7.2.x ant\u00e9rieures \u00e0 7.2.1","product":{"name":"FortiAnalyzer","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAP versions 6.x ant\u00e9rieures \u00e0 6.4.8","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAnalyzer versions 7.0.x ant\u00e9rieures \u00e0 7.0.4","product":{"name":"FortiAnalyzer","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAP-U versions ant\u00e9rieures \u00e0 6.2.4","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS versions ant\u00e9rieures \u00e0 7.0.6","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiSOAR versions ant\u00e9rieures \u00e0 7.2.1","product":{"name":"FortiSOAR","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiADC versions ant\u00e9rieures \u00e0 6.2.2","product":{"name":"FortiADC","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAnalyzer versions 6.x ant\u00e9rieures \u00e0 6.4.9","product":{"name":"FortiAnalyzer","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAP versions 7.0.x ant\u00e9rieures \u00e0 7.0.4","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2021-43080","url":"https://www.cve.org/CVERecord?id=CVE-2021-43080"},{"name":"CVE-2022-29062","url":"https://www.cve.org/CVERecord?id=CVE-2022-29062"},{"name":"CVE-2022-38377","url":"https://www.cve.org/CVERecord?id=CVE-2022-38377"},{"name":"CVE-2022-29058","url":"https://www.cve.org/CVERecord?id=CVE-2022-29058"},{"name":"CVE-2022-30298","url":"https://www.cve.org/CVERecord?id=CVE-2022-30298"},{"name":"CVE-2022-29053","url":"https://www.cve.org/CVERecord?id=CVE-2022-29053"},{"name":"CVE-2021-43076","url":"https://www.cve.org/CVERecord?id=CVE-2021-43076"},{"name":"CVE-2022-29061","url":"https://www.cve.org/CVERecord?id=CVE-2022-29061"},{"name":"CVE-2022-27491","url":"https://www.cve.org/CVERecord?id=CVE-2022-27491"},{"name":"CVE-2022-26114","url":"https://www.cve.org/CVERecord?id=CVE-2022-26114"},{"name":"CVE-2022-35847","url":"https://www.cve.org/CVERecord?id=CVE-2022-35847"}],"links":[],"reference":"CERTFR-2022-AVI-800","revisions":[{"description":"Version initiale","revision_date":"2022-09-07T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Injection de code indirecte \u00e0 distance (XSS)"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nFortinet. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-163 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-21-163"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-215 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-21-215"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-140 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-22-140"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-143 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-20-143"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-073 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-22-073"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-152 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-22-152"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-045 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-21-045"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-156 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-22-156"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-306 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-22-306"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-222 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-21-222"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-158 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-22-158"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-154 du 06 septembre 2022","url":"https://www.fortiguard.com/psirt/FG-IR-22-154"}]}