VULNERABILITY INTELLIGENCE

CVE-2021-24017

CVSS score5.4 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2021-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Description

An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.

Weakness classification

  • nvd@nist.gov: CWE-287

Primary references