VYPR
← All advisories
High severity8.8NVD Advisory· Published May 4, 2022· Updated Jun 17, 2026

CVE-2021-41020

CVE-2021-41020

Description

An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.

Affected products

3
  • Fortinet/FortiIsolator3 versions
    cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*range: >=2.3.0,<2.3.3
    • (no CPE)range: <=2.3.2
    • (no CPE)range: FortiIsolator 2.3.2, 2.3.1, 2.3.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.