CVE-2021-36177

An improper access control vulnerability CWE-284 in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database...

PT-2022-10488

Name of the Vulnerable Software and Affected Versions FortiAuthenticator HA service versions 6.3.2 and below FortiAuthenticator HA service versions 6.2.x FortiAuthenticator HA service versions 6.1.x FortiAuthenticator HA service versions 6.0.x Description An improper access control issue may allo...