VULNERABILITY INTELLIGENCE
CVE-2021-43065
CVSS score7.8 HIGH
EPSS probability0.44%
CISA KEVNot currently listed
Published2021-12-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data.
Weakness classification
- nvd@nist.gov: CWE-732
Primary references
- psirt@fortinet.com — Vendor Advisory
- psirt@fortinet.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory