PT-2022-11771 · Fortinet · Fortiadc

Published 2022-09-06 · Updated 2022-09-13 · CVE-2021-43076

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FortiADC versions 6.2.1 and below FortiADC versions 6.1.5 and below FortiADC versions 6.0.4 and below FortiADC versions 5.4.5 and below FortiADC versions 5.3.7 and below

Description An improper privilege management issue may allow a remote authenticated attacker with a restricted user profile to modify system files using shell access. This could potentially lead to unauthorized changes to the system.

Recommendations For FortiADC versions 6.2.1 and below, update to a version above 6.2.1 to resolve the issue. For FortiADC versions 6.1.5 and below, update to a version above 6.1.5 to resolve the issue. For FortiADC versions 6.0.4 and below, update to a version above 6.0.4 to resolve the issue. For FortiADC versions 5.4.5 and below, update to a version above 5.4.5 to resolve the issue. For FortiADC versions 5.3.7 and below, update to a version above 5.3.7 to resolve the issue. As a temporary workaround, consider restricting shell access to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2021-43076

Affected Products

Fortiadc

References · 6

• https://fortiguard.com/psirt/FG-IR-21-215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43076 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43076 · Vendor Advisory
• https://t.me/cibsecurity/49318 · Telegram Post
• https://t.me/cvenotify/36090 · Telegram Post
• https://t.me/cvenotify/35761 · Telegram Post