Aller au contenu
en Se connecter
8.3 Élevée

CVE-2021-43067 A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2…

Description

A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version 6.2.1 and below, version 6.1.2 and below, version 6.0.7 to 6.0.1 allows attacker to duplicate a target LDAP user 2 factors authentication token via crafted HTTP requests.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiAuthenticator Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiAuthenticator

Les 3 CVE de Fortinet FortiAuthenticator →
CVE-2021-26116 An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of… 6.7 Moyenne CVE-2021-43068 A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of… 5.4 Moyenne
Suivre cette CVE