Lucene search
FortinetCVELIST:CVE-2021-43068HistoryDec 09, 2021 - 9:38 a.m.
CVE-2021-43068
2021-12-0909:38:37
fortinet
www.cve.org
2
fortinet fortiauthenticator
6.4.0
improper authentication
bypass
radius login portal
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
28.4%
A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal.
CNA Affected
[
{
"product": "Fortinet FortiAuthenticator",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiAuthenticator 6.4.0"
}
]
}
]References
Related
fortinet
fortinet
prion
prion
Authentication flaw
2021-12-09 10:15:00
cnvd
cnvd
Fortinet FortiAuthenticator Authentication Bypass Vulnerability
2021-12-12 00:00:00
cve
cve
CVE-2021-43068
2021-12-09 10:15:11
nvd
nvd
CVE-2021-43068
2021-12-09 10:15:11
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
28.4%
Related for CVELIST:CVE-2021-43068