CVEvulnerability

CVE-2021-24017

4.3 MEDIUM Published 2021-09-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-09-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-287

Description

An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.

Affected configurations

• fortinet fortimanager (< 6.2.7) • fortinet fortimanager (>= 6.4.0 < 6.4.4)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References