CVE-2022-45862

score

<0.1

cvss

3.7

epss

0.4%

published

2024-08-13

kev added

—

first seen

2026-10-21

FortiOS 7.2.5 and below, 7.0, 6.4; FortiProxy 7.2, 7.0; FortiPAM 1.3, 1.2, 1.1, 1.0; FortiSwitchManager 7.2.1 and below contain an insufficient session expiration caused by GUI session re-use after logout, letting attackers with credentials reuse sessions, exploit requires attacker to acquire valid credentials.