{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-21T14:55:19.740","vulnerabilities":[{"cve":{"id":"CVE-2022-29060","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-19T14:15:08.603","lastModified":"2024-11-21T06:58:25.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retrieve the key from one device to sign JWT tokens for any device."},{"lang":"es","value":"Una vulnerabilidad en el uso de claves criptográficas embebidas [CWE-321] en la API de FortiDDoS versiones 5.5.0 hasta 5.5.1, 5.4.0 hasta 5.4.2, 5.3.0 hasta 5.3.1, 5.2.0, 5.1.0, puede permitir a un atacante que consiga recuperar la clave de un dispositivo firmar tokens JWT para cualquier dispositivo.\n"}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6D099B4B-CAB5-4491-993A-38C2D3A4856F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"499D9AC5-1FB2-4891-8C43-BDAD01DD42D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"73D6C167-6EB8-43FE-8DE1-05C17FCDAE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B35C9E7A-12CD-4191-95B1-DD057C5FA330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C8AC7AEA-8028-40A7-B7AE-1CB8556C902A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0DE896C0-D7D5-4A2D-BF98-09A42EABBE9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"363742A6-DB82-472A-9C43-4D17C532110B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AA704D20-CE0E-4412-A8DC-45F0F2299F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"03FC9BA3-0E36-422A-ADED-B9D91C833506"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-071","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}}]}