A vulnerability found in Fortinet FortiOS and FortiProxy. CVE-2022-35843 tracked as, authentication bypass was identified in the SSH login component of FortiOS. The bug can only be triggered when Radius authentication is used. The manipulation with an unknown input leads to a authentication bypass by assumed-immutable data vulnerability. CWE is classifying the issue as CWE-302. The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker. 

If attacker compromise this vulnerability they can bypass the authentication mechanism of the device, which may result in gaining access to the application and gets user sensitive information which can enable attacker to view, edit, delete, copy and overwrite.