Vulnerability Description
A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data.
CVSS Score
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortinac | >= 8.8.0, < 8.8.10 |
Related Weaknesses (CWE)
References
- https://fortiguard.com/advisory/FG-IR-21-178Vendor Advisory
- https://github.com/orangecertcc/security-research/security/advisories/GHSA-8wx4-ExploitThird Party Advisory
- https://fortiguard.com/advisory/FG-IR-21-178Vendor Advisory
- https://github.com/orangecertcc/security-research/security/advisories/GHSA-8wx4-ExploitThird Party Advisory
FAQ
What is CVE-2021-43065?
CVE-2021-43065 is a vulnerability with a CVSS score of 7.8 (HIGH). A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to...
How severe is CVE-2021-43065?
CVE-2021-43065 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-43065?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortinac.