CVE-2021-22128 — Fortinet / Fortinet FortiProxy

CVE-2021-22128

Fortinet / Fortinet FortiProxy PUBLISHED

Description (CNA)

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiProxy	affected FortiProxy 2.0.0, 1.2.9 and below

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-20-235

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-20-235

CISA-ADP

No English description supplied.

No references supplied.