CVE-2021-43071

A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@fortinet.com

Published

2021-12-09

Last modified

2024-10-25

Weaknesses

CWE-787

Affected products

• Fortinet Fortiweb (Fortinet)
• Fortiweb (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-21-188