Unrated severityNVD Advisory· Published Dec 8, 2021· Updated Oct 25, 2024
CVE-2021-36190
CVE-2021-36190
Description
A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests.
Affected products
2<=6.4.1, <=6.3.15+ 1 more
- (no CPE)range: <=6.4.1, <=6.3.15
- (no CPE)range: FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0
Patches
Vulnerability mechanics
References
1- fortiguard.com/advisory/FG-IR-21-123mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.