Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:13 p.m.10 views

CVE-2021-36177

An improper access control vulnerability CWE-284 in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database...

4.3CVSS7AI score0.00165EPSS
Exploits0References1
NVD
NVD
added 2022/02/02 11:15 a.m.10 views

CVE-2021-36177

An improper access control vulnerability CWE-284 in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database...

4.3CVSS0.00165EPSS
Exploits0References1
Prion
Prion
added 2022/02/02 11:15 a.m.10 views

Improper access control

An improper access control vulnerability CWE-284 in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database...

3.3CVSS4.7AI score0.00165EPSS
Exploits0References1Affected Software1
Fortinet
Fortinet
added 2022/02/01 12:0 a.m.29 views

FortiAuthenticator - Improper access control in HA service

An improper access control vulnerability CWE-284 in FortiAuthenticator HA service may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database...

3.3CVSS5.2AI score0.00165EPSS
Exploits0Affected Software1
Rows per page
Query Builder