Skip to content
fr Sign in
4.3 Medium

CVE-2021-43206 A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through…

Description

A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1, 2.0.x allows malicious webservers to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiOS, FortiProxy Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiOS, FortiProxy

The 6 CVEs of Fortinet FortiOS, FortiProxy →
CVE-2022-29055 A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0… 7.5 High CVE-2021-26092 Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0… 4.7 Medium CVE-2021-26110 An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below,… 7.8 High CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization 9.1 Critical
Track this CVE