CVE-2021-41030

An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.

Score

CVSS 3.1 9.1 Critical

Status

Modified - psirt@fortinet.com

Published

2021-12-08

Last modified

2024-10-25

Weaknesses

CWE-294

Affected products

• Forticlient Enterprise Management Server (Fortinet)
• Fortinet Forticlientems (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-21-192