CVE-2022-30305
Published: 06 December 2022
Summary
CVE-2022-30305 is a low-severity Insufficient Logging (CWE-778) vulnerability in Fortinet Fortideceptor. Its CVSS base score is 3.7 (Low).
Operationally, ranked at the 44.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-52256
Vulnerability details
An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2…
more
may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no limit on the number of failed authentication attempts.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
This control directly enforces limits on consecutive invalid logon attempts and automatic response (e.g., lockout) to prevent brute-force exploitation of authentication mechanisms.
Audit policy requires defining and implementing logging of security-relevant events, directly reducing insufficient logging.
Providing proof of performed actions necessitates sufficient logging of security-relevant events with attribution details.
Retaining audit records for a defined period ensures security-relevant events remain available for after-the-fact investigations, directly mitigating the risk that attackers can hide actions due to missing or purged log data.
Directly requires generation of audit records for specified events, preventing the absence of logging that allows undetected malicious activity.
Directly implements detailed session logging to address the weakness of insufficient logging.
Provides alternate logging mechanism to maintain audit trails when primary capability fails, directly reducing insufficient logging.
Employing coordination mechanisms ensures consistent and sufficient logging practices are applied when audit information crosses organizational boundaries.