CVE-2021-43064 MEDIUM

CVE-2021-43064

Vendor Fortinet
Product Fortinet FortiWeb
Published December 8, 2021
Last update October 25, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C

What the vulnerability does

01Description

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to use the device as a proxy and reach external or protected hosts via redirection handlers.

Key dates

02Disclosure timeline

December 8, 2021 CVE published
October 25, 2024 Record updated