4.8
Moyenne
CVE-2021-32584 An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and…
Description
An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionality by just specifying the correct URL. The vulnerability applies only to limited CGI resources and might allow the unauthorized party to access configuration details.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiWLC | 8.6.0 | Pas de correctif indiqué |
| FortiWLC 8.5 | 8.5.0 → 8.5.3 | Pas de correctif indiqué |
| FortiWLC 8.4 | 8.4.0 → 8.4.8 | Pas de correctif indiqué |
| FortiWLC 8.3 | 8.3.0 → 8.3.3 | Pas de correctif indiqué |
| FortiWLC 8.2 | 8.2.4 → 8.2.7 | Pas de correctif indiqué |
| FortiWLC | 8.1.3 | Pas de correctif indiqué |
Autres CVE de FortiWLC
Les 5 CVE de FortiWLC →
CVE-2021-22126
A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3…
6.5
Moyenne
CVE-2021-26087
An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below,…
4.2
Moyenne
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Moyenne
CVE-2021-26093
An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a…
6.6
Moyenne