PT-2021-21163 · Fortinet · Fortiportal

Published 2021-11-02 · Updated 2021-11-04 · CVE-2021-36181

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FortiPortal versions prior to 6.0.6

Description The issue is related to a concurrent execution using shared resources with improper synchronization, also known as a 'Race Condition', in the customer database interface. This may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests.

Recommendations For versions prior to 6.0.6, update to version 6.0.6 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2021-36181

Affected Products

Fortiportal

References · 3

• https://fortiguard.com/advisory/FG-IR-21-102 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-36181 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36181 · Security Note