Lucene search

K
fortinetFortiGuard LabsFG-IR-21-147
HistoryMay 03, 2022 - 12:00 a.m.

Protect

2022-05-0300:00:00
FortiGuard Labs
www.fortiguard.com
37
fortios
access control
vulnerability
authenticated attacker
sensitive information
ssl-vpn
vdoms

EPSS

0.001

Percentile

22.7%

An improper access control vulnerability [CWE-284] in FortiOS may allow an authenticated attacker with a restricted user profile to gather sensitive information and modify the SSL-VPN tunnel status of other VDOMs using specific CLI commands.

EPSS

0.001

Percentile

22.7%

Related for FG-IR-21-147