---
id: 10248
title: "FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)"
cve: CVE-2022-40684
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/attack-blogs/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/"
published_at: "2022-10-13T16:45:47Z"
tags: ["vulnerability-research", "fortinet", "fortios", "auth-bypass", "horizon3"]
phying_url: "https://phying.com/item/10248"
lang: en
---

# FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)

## Summary

Fortinet recently patched a critical authentication bypass vulnerability that gives an attacker the ability to login as an administrator,

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2022-40684
- **Published:** 2022-10-13T16:45:47Z
- **Original:** https://horizon3.ai/attack-research/attack-blogs/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684/
- **Phying News:** https://phying.com/item/10248