Lucene search

FortinetCVELIST:CVE-2021-43076

HistorySep 06, 2022 - 3:15 p.m.

CVE-2021-43076

2022-09-0615:15:17

fortinet

www.cve.org

fortiadc

cwe-269

privilege management

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:F

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

38.6%

JSON

An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and below and 5.3.7 and below may allow a remote authenticated attacker with restricted user profile to modify the system files using the shell access.

CNA Affected

[
  {
    "product": "FortiADC",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiADC 6.2.1, 6.2.0, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-21-215