low3.1
CVE-2021-36181
A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal b…
Impact
A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiportal | from 4.0.0 before 6.0.6 |