Skip to content
OpenAdvisories
High · 8.8 CVE-2021-41020 EUVD-2021-28173GHSA-v9h9-p74g-4ccw

An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged att…

Published May 4, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiIsolator Category: Network devices

Description

An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiIsolator FortiIsolator 2.3.2, 2.3.1, 2.3.0 —

References