Fortinet Fortiauthenticator vulnerabilities

3 vulnerabilities

Known vulnerabilities in Fortinet Fortiauthenticator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2021-26116fortinetfortiauthenticator+1
EPSS score
0.62%
An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.8.3CVE-2021-43067fortinetfortiauthenticator+1
EPSS score
1.14%
A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version 6.2.1 and below, version 6.1.2 and below, version 6.0.7 to 6.0.1 allows attacker to duplicate a target LDAP user 2 factors authentication token via crafted HTTP requests.8.1CVE-2021-43068fortinetfortiauthenticator+1
EPSS score
0.58%
A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal.