CVE-2022-23446: Fortinet Fortiedr

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission.

Affected products

• Fortinet Fortiedr: version 4.0.0 only; version 5.0.0 only; version 5.0.1 only; version 5.0.2 only

Published 2022-04-06. Last modified 2026-06-17.