Lucene search

[email protected]CVE-2021-41030

HistoryDec 08, 2021 - 6:15 p.m.

CVE-2021-41030

2021-12-0818:15:18

CWE-294

[email protected]

web.nvd.nist.gov

cve-2021-41030

forticlient

authentication bypass

capture-replay

vulnerability

cwe-294

nvd

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.3 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

51.1%

JSON

An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.

Affected configurations

NVD

Node

fortinetforticlient_enterprise_management_serverRange6.2.0–6.2.9

fortinetforticlient_enterprise_management_serverRange6.4.0–6.4.4

fortinetforticlient_enterprise_management_serverMatch7.0.0

fortinetforticlient_enterprise_management_serverMatch7.0.1

CPENameOperatorVersion
fortinet:forticlient_enterprise_management_serverfortinet forticlient enterprise management serverle6.2.9
fortinet:forticlient_enterprise_management_serverfortinet forticlient enterprise management serverle6.4.4
fortinet:forticlient_enterprise_management_serverfortinet forticlient enterprise management servereq7.0.0
fortinet:forticlient_enterprise_management_serverfortinet forticlient enterprise management servereq7.0.1

CPE	Name	Operator	Version
fortinet:forticlient_enterprise_management_server	fortinet forticlient enterprise management server	le	6.2.9
fortinet:forticlient_enterprise_management_server	fortinet forticlient enterprise management server	le	6.4.4
fortinet:forticlient_enterprise_management_server	fortinet forticlient enterprise management server	eq	7.0.0
fortinet:forticlient_enterprise_management_server	fortinet forticlient enterprise management server	eq	7.0.1

CNA Affected

[
  {
    "product": "Fortinet FortiClientEMS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiClientEMS 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-21-192

Social References

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.3 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

51.1%

JSON

Related for CVE-2021-41030

prion1 cvelist1 fortinet1 nvd1