CVE-2021-41032
An improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3 and prior may allow an authenticated attacker with a restricted user profile to gather sensitive information and modify the SSL-VPN tunnel status of other VDOMs using specific CLI commands.
- Score
- CVSS 3.1 6.3 Medium
- Status
- Modified - psirt@fortinet.com
- Published
- 2022-05-04
- Last modified
- 2024-10-22
Affected products
References
- https://fortiguard.com/psirt/FG-IR-21-147
