CVE-2021-26107

CVE-2021-26107 affects FortiManager 6.4.4 and 6.4.5, where an authenticated user with a restricted profile can modify the VPN tunnel status of other VDOMs via VPN Manager due to improper access control (CWE-284). The issue is confirmed in multiple data sources (FortiGuard advisory FG-IR-21-043; R...