NetSight
medium6.7

CVE-2021-26116

An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow…

Impact

An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected products

VendorProductAffected versions
FortinetFortiauthenticator
from 5.0.0 before 6.3.1

Weakness classification

References