Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-40991 State: PUBLISHED Published: 2021-10-15T14:08:59 Last Updated: 2024-08-04T02:59:31.118Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote disclosure of sensitive information Description: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks
CVE ID: CVE-2021-40992 State: PUBLISHED Published: 2021-10-15T13:36:52 Last Updated: 2024-08-04T02:59:30.339Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote SQL injection Description: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE ID: CVE-2021-40993 State: PUBLISHED Published: 2021-10-15T14:07:37 Last Updated: 2024-08-04T02:59:30.959Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote SQL injection Description: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE ID: CVE-2021-40994 State: PUBLISHED Published: 2021-10-15T14:07:48 Last Updated: 2024-08-04T02:59:30.970Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/aler
CVE ID: CVE-2021-40995 State: PUBLISHED Published: 2021-10-15T14:10:12 Last Updated: 2024-08-04T02:59:30.365Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/aler
CVE ID: CVE-2021-40996 State: PUBLISHED Published: 2021-10-15T14:05:13 Last Updated: 2024-08-04T02:59:31.207Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote authentication bypass Description: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-
CVE ID: CVE-2021-40997 State: PUBLISHED Published: 2021-10-15T14:11:22 Last Updated: 2024-08-04T02:59:31.171Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote authentication bypass Description: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-
CVE ID: CVE-2021-40998 State: PUBLISHED Published: 2021-10-15T14:12:28 Last Updated: 2024-08-04T02:59:31.116Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/aler
CVE ID: CVE-2021-40999 State: PUBLISHED Published: 2021-10-15T11:25:36 Last Updated: 2024-08-04T02:59:31.111Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/aler
CVE ID: CVE-2021-41000 State: PUBLISHED Published: 2022-03-02T21:39:25 Last Updated: 2024-08-04T02:59:31.406Z Vendors: n/a Products: Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series Problem Types: Multiple authenticated remote code execution Description: Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series v
itch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt
CVE ID: CVE-2021-41001 State: PUBLISHED Published: 2022-03-02T21:38:10 Last Updated: 2024-08-04T02:59:30.299Z Vendors: n/a Products: Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series Problem Types: Authenticated remote code execution Description: An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s):
s, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt
CVE ID: CVE-2021-41002 State: PUBLISHED Published: 2022-03-02T21:40:31 Last Updated: 2024-08-04T02:59:31.058Z Vendors: n/a Products: Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series Problem Types: Multiple authenticated remote path traversal Description: Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series v
itch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt
CVE ID: CVE-2021-41003 State: PUBLISHED Published: 2022-03-02T21:41:42 Last Updated: 2024-08-04T02:59:30.997Z Vendors: n/a Products: Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series Problem Types: Multiple unauthenticated command injection Description: Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AO
Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt
CVE ID: CVE-2021-41004 State: PUBLISHED Published: 2022-04-12T16:11:35 Last Updated: 2024-08-04T02:59:30.361Z Vendors: n/a Products: Aruba Instant On 1930 Switch Series Problem Types: remote unauthenticated denial of service Description: A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us
CVE ID: CVE-2021-41005 State: PUBLISHED Published: 2022-04-12T16:11:35 Last Updated: 2024-08-04T02:59:31.100Z Vendors: n/a Products: Aruba Instant On 1930 Switch Series Problem Types: remote authenticated denial of service Description: A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04270en_us
CVE ID: CVE-2021-41006 State: REJECTED Published: N/A Last Updated: 2023-01-05T21:28:36.892Z Description: No description available.
CVE ID: CVE-2021-41007 State: REJECTED Published: N/A Last Updated: 2023-01-05T21:29:12.277Z Description: No description available.
CVE ID: CVE-2021-41008 State: REJECTED Published: N/A Last Updated: 2023-01-05T21:29:15.715Z Description: No description available.
CVE ID: CVE-2021-41009 State: REJECTED Published: N/A Last Updated: 2023-01-05T21:29:18.652Z Description: No description available.
CVE ID: CVE-2021-41010 State: REJECTED Published: N/A Last Updated: 2023-01-05T21:29:22.153Z Description: No description available.
CVE ID: CVE-2021-41011 State: PUBLISHED Published: 2021-09-22T15:07:42 Last Updated: 2024-08-04T02:59:31.388Z Vendors: LINE Corporation Products: LINE client for iOS Problem Types: n/a Description: LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditions. This is usually impossible, but in combination with a server-side bug, attackers could get this information. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1279524
CVE ID: CVE-2021-41013 State: PUBLISHED Published: 2021-12-08T13:33:58 Last Updated: 2024-10-25T13:39:22.915Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Improper access control Description: An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may allow an unauthorized and unauthenticated user to access the Log reports via their URLs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-138
CVE ID: CVE-2021-41014 State: PUBLISHED Published: 2021-12-08T13:06:15 Last Updated: 2024-10-25T13:39:55.287Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Denial of service Description: A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-131
CVE ID: CVE-2021-41015 State: PUBLISHED Published: 2021-12-08T12:39:00 Last Updated: 2024-10-25T13:40:28.039Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Execute unauthorized code or commands Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to SAML login handler Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-139
CVE ID: CVE-2021-41016 State: PUBLISHED Published: 2022-02-02T10:58:37 Last Updated: 2024-10-25T13:36:06.405Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: n/a Products: n/a Problem Types: n/a Description: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiExtender version 7.0.1 and below, 4.2.3 and below, 4.1.7 and below allows an authenticated attacker to execute privileged shell commands via CLI commands including special characters Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-148
CVE ID: CVE-2021-41017 State: PUBLISHED Published: 2021-12-08T18:51:10 Last Updated: 2024-10-25T13:38:15.774Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Execute unauthorized code or commands Description: Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-160
CVE ID: CVE-2021-41018 State: PUBLISHED Published: 2022-02-02T11:25:14 Last Updated: 2024-10-25T13:35:35.872Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: n/a Products: n/a Problem Types: n/a Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-166
CVE ID: CVE-2021-41019 State: PUBLISHED Published: 2021-11-02T17:41:08 Last Updated: 2024-10-25T13:48:22.594Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Information disclosure Description: An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-074
CVE ID: CVE-2021-41020 State: PUBLISHED Published: 2022-05-04T15:25:10 Last Updated: 2024-10-25T13:32:21.471Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiIsolator Problem Types: Improper access control Description: An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-040
CVE ID: CVE-2021-41021 State: PUBLISHED Published: 2021-12-08T17:48:06 Last Updated: 2024-10-25T13:39:11.891Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiNAC Problem Types: Escalation of privilege Description: A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-182
CVE ID: CVE-2021-41022 State: PUBLISHED Published: 2021-11-02T18:23:56 Last Updated: 2024-10-25T13:46:06.528Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C) Vendors: Fortinet Products: Fortinet FortiSIEMWindowsAgent Problem Types: Execute unauthorized code or commands Description: A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-176
CVE ID: CVE-2021-41023 State: PUBLISHED Published: 2021-11-02T18:26:34 Last Updated: 2024-10-25T13:45:51.643Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:X/RL:O/RC:C) Vendors: Fortinet Products: Fortinet FortiSIEMWindowsAgent Problem Types: Information disclosure Description: A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-175
CVE ID: CVE-2021-41024 State: PUBLISHED Published: 2021-12-08T12:11:04 Last Updated: 2024-10-25T13:41:11.256Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Escalation of privilege Description: A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject path traversal character sequences to disclose sensitive information of the server via the GET request of the login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.c
gin page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-181
CVE ID: CVE-2021-41025 State: PUBLISHED Published: 2021-12-08T18:46:00 Last Updated: 2024-10-25T13:38:26.805Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Improper access control Description: Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7, including an instance of concurrent execution using shared resource with improper synchronization and one of authentication bypass by capture-replay, may allow a remote unauthenticated attacker to circumvent the authentic
one of authentication bypass by capture-replay, may allow a remote unauthenticated attacker to circumvent the authentication process and authenticate as a legitimate cluster peer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-130
CVE ID: CVE-2021-41026 State: PUBLISHED Published: 2022-04-06T16:00:26 Last Updated: 2024-10-22T20:58:17.694Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Improper access control Description: A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-156
CVE ID: CVE-2021-41027 State: PUBLISHED Published: 2021-12-08T12:55:42 Last Updated: 2024-10-25T13:40:17.517Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Execute unauthorized code or commands Description: A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via crafted certificates loaded into the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-134
CVE ID: CVE-2021-41028 State: PUBLISHED Published: 2021-12-16T18:13:38 Last Updated: 2024-10-25T13:36:27.735Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiClientEMS, FortiClientWindows, FortiClientLinux, FortiClientMac Problem Types: Information disclosure Description: A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability [CWE-297] in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an unauthenticated and network adjacent attacker to p