Medium · 5.4 CVE-2021-43068 EUVD-2021-30021GHSA-7c78-24gm-9rqf

A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADI…

Published Dec 9, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiAuthenticator Category: Network devices

Description

A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiAuthenticator	FortiAuthenticator 6.4.0	—

References

https://fortiguard.com/advisory/FG-IR-21-212