Medium · 6.7 CVE-2021-26116 EUVD-2021-12937GHSA-5965-3x5m-9954

An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator be…

Published Apr 6, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiAuthenticator Category: Network devices

Description

An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiAuthenticator	FortiAuthenticator before 6.3.1	—

References

https://fortiguard.com/advisory/FG-IR-21-068