CVE-2021-41030: fortinet forticlient_enterprise_management_server Authentication Bypass by Capture-replay

Vulnerability summary

CVE-2021-41030 is a critical (CVSS 9.1) Authentication Bypass by Capture-replay vulnerability in fortinet forticlient_enterprise_management_server. EPSS estimates a 0.99% chance of exploitation in the next 30 days, higher than 61.8% of scored vulnerabilities.

Timeline

1. 08-12-2021
   PublishedVulnerability first disclosed.
2. 25-10-2024
   Last modifiedVulnerability information updated.

Description

An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.

• CWE-294Authentication Bypass by Capture-replayA capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).