CVE-2021-36177

An improper access control vulnerability CWE-284 in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database...

CVE-2021-36177

FortiAuthenticator has an improper access control vulnerability (CWE-284) affecting the HA service in FortiAuthenticator versions ≤ 6.3.2 and in 6.2.x, 6.1.x, and 6.0.x. An attacker connected to the same VLAN as the HA management interface can reach the FAC’s database directly without authenticat...