Lucene search
FortinetCVELIST:CVE-2021-43065HistoryDec 09, 2021 - 9:15 a.m.
CVE-2021-43065
2021-12-0909:15:04
fortinet
www.cve.org
2
cve-2021-43065
fortinet
fortinac
permission assignment
sensitive system data
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RC:C
AI Score
8
Confidence
High
EPSS
0.001
Percentile
17.8%
A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data.
CNA Affected
[
{
"product": "Fortinet FortiNAC",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiNAC 9.2.0, 9.1.3, 9.1.2, 9.1.1, 9.1.0, 8.8.9, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.1, 8.8.0"
}
]
}
]Related
cnvd
cnvd
Fortinet FortiNAC has an unspecified vulnerability
2021-12-09 00:00:00
fortinet
fortinet
FortiNAC - improper permissions set for tomcat users configuration file
2021-12-07 00:00:00
prion
prion
Code injection
2021-12-09 10:15:00
cve
cve
CVE-2021-43065
2021-12-09 10:15:11
nvd
nvd
CVE-2021-43065
2021-12-09 10:15:11
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RC:C
AI Score
8
Confidence
High
EPSS
0.001
Percentile
17.8%
Related for CVELIST:CVE-2021-43065