CVE-2021-43067

Fortinet FortiAuthenticator has a information disclosure vulnerability (CVE-2021-43067) affecting version 6.4.0 and older branches (6.3.2 and below, 6.2.1 and below, 6.1.2 and below, 6.0.7 to 6.0.1). The issue allows an attacker to duplicate a target LDAP user’s two‑factor authentication token vi...