Fortinet FortiWeb Stack-based buffer overflow due to type mismatch (FG-IR-21-134)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-134 advisory. - A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute...

CVE-2021-41027

CVE-2021-41027 affects Fortinet FortiWeb (versions 6.4.0 and 6.4.1). The issue is a stack-based buffer overflow exploitable by an authenticated attacker via crafted certificates loaded into the device, enabling unauthorized code/command execution. Public sources from Fortinet (FG-IR-21-134) descr...