CVE-2021-41024 — Fortinet / Fortinet FortiOS

CVE-2021-41024

Fortinet / Fortinet FortiOS PUBLISHED

Description (CNA)

A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject path traversal character sequences to disclose sensitive information of the server via the GET request of the login page.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiOS	affected FortiOS 7.0.1, 7.0.0 FortiProxy 7.0.0

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-21-181

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-21-181

CISA-ADP

No English description supplied.

No references supplied.