VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 8, 2021· Updated Jun 17, 2026

CVE-2021-41024

CVE-2021-41024

Description

A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject path traversal character sequences to disclose sensitive information of the server via the GET request of the login page.

Affected products

6
  • Fortinet/Fortiproxy2 versions
    cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.0
  • Fortinet/Fortios3 versions
    cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.0, 7.0.1
  • Fortinet/Fortinetcpe-rescue
    Range: FortiOS 7.0.1, 7.0.0 FortiProxy 7.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.