medium5.4
CVE-2021-41030
An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated…
Impact
An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Forticlient Enterprise Management Server | from 6.2.0 through 6.2.9 from 6.4.0 through 6.4.4 Versions 7.0.0, 7.0.1 |