5.4
Medium
CVE-2021-41030 An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4…
Description
An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fortinet FortiClientEMS | Versions not published |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of Fortinet FortiClientEMS
The 5 CVEs of Fortinet FortiClientEMS →
CVE-2021-36189
A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below…
6.8
Medium
CVE-2020-15940
An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and…
4.1
Medium
CVE-2021-24019
An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and…
8.1
High
CVE-2020-15941
A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an…
5.4
Medium