Vulnetix
Try Vulnetix Request Demo
CVE-2021-22128 PUBLISHED CVSS 7.099999904632568 HIGH

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.

EPSS 0.21% · 43.6th percentile

Risk Scores

CVSS v3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
EPSS Score
0.21%
43.6th percentile

Affected Products

VendorProductVersions
FortinetFortinet FortiProxyFortiProxy 2.0.0, 1.2.9 and below
fortinetfortiproxy0, 2.0.0

Timeline

References

Open in Interactive Console →