Lucene search
FortiGuard LabsFG-IR-21-231HistoryMay 03, 2022 - 12:00 a.m.
Protect
2022-05-0300:00:00
FortiGuard Labs
www.fortiguard.com
61
0.001 Low
EPSS
Percentile
31.5%
A server-generated error message containing sensitive information vulnerability [CWE-550] in FortiOS and FortiProxy web proxy may allow a malicious webserver to retrieve a web proxy’s client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortiproxy | eq | 7.0.1 | |
| fortiproxy | eq | 7.0.0 | |
| fortiproxy | eq | 2.0.13 | |
| fortiproxy | eq | 2.0.12 | |
| fortiproxy | eq | 2.0.11 | |
| fortiproxy | eq | 2.0.10 | |
| fortiproxy | eq | 2.0.9 | |
| fortiproxy | eq | 2.0.8 | |
| fortiproxy | eq | 2.0.7 | |
| fortiproxy | eq | 2.0.6 |
Related
prion
prion
Code injection
2022-05-04 16:15:00
cve
cve
CVE-2021-43206
2022-05-04 16:15:08
nessus
nessus
Fortinet FortiOS Sensitive Information Disclosure (FG-IR-21-231)
2022-05-27 00:00:00
cvelist
cvelist
CVE-2021-43206
2022-05-04 15:25:26
nvd
nvd
CVE-2021-43206
2022-05-04 16:15:08