An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/advisory/FG-IR-21-200 |
History
Fri, 25 Oct 2024 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2021-12-08T10:53:03
Updated: 2024-10-25T13:42:26.199Z
Reserved: 2021-10-20T00:00:00
Link: CVE-2021-42758
Vulnrichment
Updated: 2024-08-04T03:38:50.213Z
NVD
Status : Analyzed
Published: 2021-12-08T11:15:11.887
Modified: 2021-12-10T22:18:40.400
Link: CVE-2021-42758
Redhat
No data.