VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 8, 2021· Updated Oct 25, 2024

CVE-2021-43067

CVE-2021-43067

Description

A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version 6.2.1 and below, version 6.1.2 and below, version 6.0.7 to 6.0.1 allows attacker to duplicate a target LDAP user 2 factors authentication token via crafted HTTP requests.

Affected products

2
  • Fortinet/Fortiauthenticatorllm-fuzzy2 versions
    <=6.3.2+ 1 more
    • (no CPE)range: <=6.3.2
    • (no CPE)range: FortiAuthenticator 6.4.0, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.