CVE-2021-43076

Published: Sep 6, 2022Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and below and 5.3.7 and below may allow a remote authenticated attacker with restricted user profile to modify the system files using the shell access.

Affected (6)

Products: Fortinet: Fortiadc

Fortinet

1 product

Fortiadc

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiadc	From 5.3.0 to 5.3.7
Fortinet Fortiadc	From 5.4.0 to 5.4.5
Fortinet Fortiadc	From 6.0.0 to 6.0.4
Fortinet Fortiadc	From 6.1.0 to 6.1.5
Fortinet Fortiadc	Version 6.2.0
Fortinet Fortiadc	Version 6.2.1

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://fortiguard.com/psirt/FG-IR-21-215

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-21-215

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.