Lucene search
FortiGuard LabsFG-IR-20-191HistoryJul 07, 2021 - 12:00 a.m.
FSSO Windows DC Agent [FSSO] Insecure communication between DC agent and Collector
2021-07-0700:00:00
FortiGuard Labs
www.fortiguard.com
12
0.001 Low
EPSS
Percentile
29.6%
An improper authentication vulnerability [CWE-287] in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fsso windows ca | eq | 5.0.295 | |
| fsso windows ca | eq | 5.0.294 | |
| fsso windows dc agent | eq | 5.0.295 | |
| fsso windows dc agent | eq | 5.0.294 |
Related
cvelist
cvelist
CVE-2021-26088
2021-07-12 13:21:41
prion
prion
Authentication flaw
2021-07-12 14:15:00
nvd
nvd
CVE-2021-26088
2021-07-12 14:15:08
githubexploit
githubexploit
Exploit for Improper Authentication in Fortinet Fortinet Single Sign-On
2023-05-09 13:13:41
cve
cve
CVE-2021-26088
2021-07-12 14:15:08