FortiIsolator -- Unauthorized user able to regenerate CA certificate

2022-05-0300:00:00

FortiGuard Labs

www.fortiguard.com

0.001 Low

EPSS

Percentile

36.9%

JSON

An improper access control vulnerability [CWE-284] in FortiIsolator may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.

CPENameOperatorVersion
fortiisolatoreq2.3.2
fortiisolatoreq2.3.1
fortiisolatoreq2.3.0

Name	Operator	Version
fortiisolator	eq	2.3.2
fortiisolator	eq	2.3.1
fortiisolator	eq	2.3.0

0.001 Low

EPSS

Percentile

36.9%

JSON

Related for FG-IR-21-040