FatPipe WARP, IPVPN, and MPVPN Authorization Vulnerability (CNVD-2021-101934)

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover as a result of a WAN component or service failure resulting in a data line connection outage.A security vulnerability exists in FatPipe WARP, IPVPN and MPVPN, which stems from a lack of authorization in the software’s web management interface. An attacker could use the vulnerability to access the URL “/fpui/jsp/index.jsp”, resulting in an unknown impact and a possible breach of confidentiality.