Skip to content
fr Sign in
7.8 High

CVE-2021-26110 An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below,…

Description

An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script and auto-script features.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiOS, FortiProxy Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiOS, FortiProxy

The 6 CVEs of Fortinet FortiOS, FortiProxy →
CVE-2022-29055 A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0… 7.5 High CVE-2021-43206 A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through… 4.3 Medium CVE-2021-26092 Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0… 4.7 Medium CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization 9.1 Critical
Track this CVE