CVE-2021-36181 — Fortinet / Fortinet FortiPortal

CVE-2021-36181

Fortinet / Fortinet FortiPortal PUBLISHED

Description (CNA)

A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiPortal	affected FortiPortal before 6.0.6

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-21-102

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-21-102

CISA-ADP

No English description supplied.

No references supplied.