Skip to content
Sign in
5.4 Medium

CVE-2021-41030 An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4…

Description

An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiClientEMS Versions not published

Other CVEs of Fortinet FortiClientEMS

The 5 CVEs of Fortinet FortiClientEMS →
CVE-2021-36189 A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below… 6.8 Medium CVE-2020-15940 An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and… 4.1 Medium CVE-2021-24019 An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and… 8.1 High CVE-2020-15941 A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an… 5.4 Medium
Track this CVE