SB2021042805 - Authentication bypass in FortiWAN

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2021042805

SB2021042805 - Authentication bypass in FortiWAN

Published: April 28, 2021 Updated: December 9, 2021

Security Bulletin ID SB2021042805
CSH Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper Authentication (CVE-ID: CVE-2021-26102)

CWE-ID: CWE-287 - Improper Authentication

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber


The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in the authentication process. A remote non-authenticated attacker can send a specially crafted HTTP POST request and delete arbitrary files on the system using directory traversal sequences. In particular, deleting specific configuration files will reset the Admin password to its default value.

Successful exploitation of the vulnerability may allow an attacker to gain full access to the affected system.


Remediation

Install update from vendor's website.

References