VULNERABILITY INTELLIGENCE

CVE-2021-36177

CVSS score4.2 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2022-02-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references