NetSight
high7.1

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and acc…

Impact

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets.

Affected products

VendorProductAffected versions
FortinetFortinet Single Sign-On
before 6.4.6
from 7.0.0 before 7.0.1

Weakness classification

References