Lucene search

[email protected]NVD:CVE-2021-43067

HistoryDec 08, 2021 - 12:15 p.m.

CVE-2021-43067

2021-12-0812:15:07

CWE-200

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

64.9%

JSON

A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version 6.2.1 and below, version 6.1.2 and below, version 6.0.7 to 6.0.1 allows attacker to duplicate a target LDAP user 2 factors authentication token via crafted HTTP requests.

Affected configurations

NVD

Node

fortinetfortiauthenticatorRange6.0.1–6.0.7

fortinetfortiauthenticatorMatch6.1.0

fortinetfortiauthenticatorMatch6.1.1

fortinetfortiauthenticatorMatch6.1.2

fortinetfortiauthenticatorMatch6.2.0

fortinetfortiauthenticatorMatch6.2.1

fortinetfortiauthenticatorMatch6.3.0

fortinetfortiauthenticatorMatch6.3.1

fortinetfortiauthenticatorMatch6.3.2

fortinetfortiauthenticatorMatch6.4.0

References

fortiguard.com/advisory/FG-IR-21-211

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

64.9%

JSON

Related for NVD:CVE-2021-43067

cvelist1 prion1 cve1