CVE-2021-26088 HIGH

CVE-2021-26088

Vendor Fortinet
Product Fortinet FSSO Windows DC Agent, FSSO Windows CA
Published July 12, 2021
Last update October 25, 2024
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets.

Key dates

02Disclosure timeline

July 12, 2021 CVE published
October 25, 2024 Record updated