Skip to content
OpenAdvisories
Low · 3.1 CVE-2021-36181 EUVD-2021-22802GHSA-64xp-v3fr-3344

A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interf…

Published Nov 2, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Description

A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiPortal FortiPortal before 6.0.6 —

References