imPC@ndo IT

Tracker / CVE-2021-26088

CVE-2021-26088

High 7.1

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets.

Affected products and versions

fortinet fortinet_single_sign-on · … → 6.4.6
fortinet fortinet_single_sign-on · 7.0.0 → 7.0.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References