VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Sep 6, 2021· Updated Jun 17, 2026

CVE-2021-24006

CVE-2021-24006

Description

An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restricted user profile to access the SD-WAN Orchestrator panel via directly visiting its URL.

Affected products

3
  • Fortinet/Fortimanager3 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=6.4.0,<6.4.4
    • (no CPE)range: 6.4.0 to 6.4.3
    • (no CPE)range: FortiManager 6.4.0 to 6.4.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.