Aller au contenu
en Se connecter
7.1 Élevée

CVE-2021-22128 An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an…

Description

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiProxy Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiProxy

Les 3 CVE de Fortinet FortiProxy →
CVE-2021-43081 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and… 6.1 Moyenne CVE-2021-22130 A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0… 6.7 Moyenne
Suivre cette CVE