Incorrect Permission Assignment Vulnerability in Fortinet FortiNAC
CVE-2021-43065

7.8HIGH

Key Information:

Vendor

Fortinet
Status
Fortinet Fortinac
Vendor
CVE Published:
9 December 2021

What is CVE-2021-43065?

An incorrect permission assignment in Fortinet FortiNAC allows unauthorized access to critical resources, enabling attackers to elevate their privileges and access sensitive system data. This vulnerability affects multiple versions of the product, including 9.2.0, 9.1.3 and earlier, and 8.8.9 and earlier, posing a significant risk to organizations reliant on FortiNAC for network access control. Users are advised to review the provided references and apply necessary security updates promptly.

Affected Version(s)

Fortinet FortiNAC FortiNAC 9.2.0, 9.1.3, 9.1.2, 9.1.1, 9.1.0, 8.8.9, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.1, 8.8.0

References

https://fortiguard.com/advisory/FG-IR-21-178
x_refsource_CONFIRM
https://github.com/orangecertcc/security-research/securit...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.