Exploit for Improper Authentication in Fortinet Fortiproxy CVE-2022-40684

Name: Exploit for Improper Authentication in Fortinet Fortiproxy CVE-2022-40684
Rating: 5 (165 reviews)

2025-11-19 | CVSS 9.8

## https://sploitus.com/exploit?id=A1A00FDF-4370-5758-B76A-CBD8344EFA1D
# # CVE-2022-40684 
CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions.

- Run exploit

```
USE: python3 exploit.py https://target.com
Ex: python3 exploit.py https://target.com

```

- Run nuclei template

```
echo https://target.com | nuclei -t CVE-2022-40684.yaml
```