Race condition

2021-11-0218:15:00

PRIOn knowledge base

www.prio-n.com

4.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

A concurrent execution using shared resource with improper Synchronization vulnerability (‘Race Condition’) in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests.

CPENameOperatorVersion
fortiportalge4.0.0
fortiportallt6.0.6

CPE	Name	Operator	Version
	fortiportal	ge	4.0.0
	fortiportal	lt	6.0.6

References

fortiguard.com/advisory/FG-IR-21-102