medium5.4
CVE-2021-24017
An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via …
Impact
An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortimanager | before 6.2.7 from 6.4.0 before 6.4.4 |