Lucene search

FortinetCVE-2021-24017

HistorySep 30, 2021 - 4:15 p.m.

CVE-2021-24017

2021-09-3016:15:07

CWE-287

fortinet

web.nvd.nist.gov

cve-2021-24017

fortinet

fortimanager

authentication

policy

object

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:H

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.

Affected configurations

Nvd

Node

fortinetfortimanagerRange<6.2.7

fortinetfortimanagerRange6.4.0–6.4.4

VendorProductVersionCPE
fortinetfortimanager*cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	fortimanager	*	cpe:2.3:a:fortinet:fortimanager::::::::

CNA Affected

[
  {
    "product": "Fortinet FortiManager",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiManager 6.4.3, 6.2.6"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-20-189

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:H

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

Related for CVE-2021-24017