Resolved issues
The resolved issues listed below may not list every bug that has been corrected with this release. For inquiries about a particular bug, please visit the Fortinet Support website.
|
Bug ID |
Description |
|---|---|
|
837219 |
FortiAuthenticator-VM on same Hyper-V host cannot form HA A/A cluster after July 2022 Windows Updates. |
|
861776 |
Upgrade OpenSSL from 1.1.1n to 1.1.1s, then again to 1.1.1t. |
|
774147 |
FortiAuthenticator - [FG-IR-21-254] `Host` header injection. |
|
831595 |
CLI - Setting timezone and DNS does not clear GUI settings cache. |
|
791452 |
OpenSSL 1.1.1n - Infinite loop in |
|
830002 |
XSS observed in the password reset done page. |
|
800714 |
[3rd party component upgrade required for security reasons] FortiAuthenticator- OpenLDAP to 2.6.2. |
|
814167 |
[3rd party component upgrade required for security reasons] FortiAuthenticator- libxml2 to 2.9.14. |
|
805720 |
[3rd party component upgrade required for security reasons] FortiAuthenticator - |
|
803891 |
SAML peer certificate expiration issue and XML security issue. |
|
788824 |
[3rd party component upgrade required for security reasons] FortiAuthenticator - Dirty Pipe Vulnerability on Linux Kernel. |
Common Vulnerabilities and Exposures
FortiAuthenticator is no longer vulnerable to the following CVE-Reference(s):
|
Bug ID |
CVE references |
|---|---|
|
791452 |
CVE-2022-0778 |
Visit https://fortiguard.com/psirt for more information.