Skip to content
fr Sign in
7.1 High

CVE-2021-22128 An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an…

Description

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiProxy Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiProxy

The 3 CVEs of Fortinet FortiProxy →
CVE-2021-43081 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and… 6.1 Medium CVE-2021-22130 A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0… 6.7 Medium
Track this CVE