VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 8, 2021· Updated Oct 25, 2024

CVE-2021-26110

CVE-2021-26110

Description

An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script and auto-script features.

Affected products

3
  • Fortinet/Fortiproxyllm-fuzzy2 versions
    <=2.0.1, <=1.2.9+ 1 more
    • (no CPE)range: <=2.0.1, <=1.2.9
    • (no CPE)range: FortiOS 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below. FortiProxy 2.0.1 and below, 1.2.9 and below
  • Fortinet/Fortiosllm-fuzzy
    Range: 7.0.0, <=6.4.6, <=6.2.9, <=6.0.12

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.