Skip to content
fr Sign in
8.3 High

CVE-2021-43067 A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2…

Description

A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version 6.2.1 and below, version 6.1.2 and below, version 6.0.7 to 6.0.1 allows attacker to duplicate a target LDAP user 2 factors authentication token via crafted HTTP requests.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiAuthenticator Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiAuthenticator

The 3 CVEs of Fortinet FortiAuthenticator →
CVE-2021-26116 An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of… 6.7 Medium CVE-2021-43068 A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of… 5.4 Medium
Track this CVE