CVE-2021-36167

An improper authorization vulnerabiltiy CWE-285 in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated attacker to bypass the webfilter control via modifying the session-id paramater...

CVE-2021-36167

An improper authorization vulnerabiltiy CWE-285 in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated attacker to bypass the webfilter control via modifying the session-id paramater...

CVE-2021-36167

CVE-2021-36167 describes an improper authorization vulnerability (CWE-285) in FortiClient for Windows that could allow an unauthenticated attacker to bypass the web filter by modifying the session-id parameter. Affected products/versions include FortiClient Windows 7.0.0, 6.4.6 and earlier, and 6...