Skip to content
OpenAdvisories
High · 7.1 CVE-2021-22128 EUVD-2021-9284GHSA-mm5g-p9fc-43hm

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote at…

Published Mar 4, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiProxy Category: Network devices

Description

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiProxy FortiProxy 2.0.0, 1.2.9 and below —

References