medium6.3
CVE-2021-26107
An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile …
Impact
An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortimanager | Versions 6.4.4, 6.4.5 |