CVE-2021-24017
CVE-2021-24017
An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:H/RL:X/RC:X
Produtos afetados
Fortinet · Fortinet FortiManagerQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
https://fortiguard.com/advisory/FG-IR-20-189