high8.8
CVE-2021-41020
An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate …
Impact
An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiisolator | from 2.3.0 before 2.3.3 |