CVE-2021-36181 LOW

CVE-2021-36181

Vendor Fortinet
Product Fortinet FortiPortal
Published November 2, 2021
Last update October 25, 2024
View on NVD All CVEs

CVSS base score

3.1/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:U/RC:C

What the vulnerability does

01Description

A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests.

Key dates

02Disclosure timeline

November 2, 2021 CVE published
October 25, 2024 Record updated