An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all versions, 6.0 all versions; FortiOS 7.0.3 and below, 6.4.8 and below, 6.2 all versions, 6.0 all versions; FortiSwitch 7.0.3 and below, 6.4.10 and below, 6.2 all versions, 6.0 all versions; FortiProxy 7.0.1 and below, 2.0.7 and below, 1.2 all versions, 1.1 all versions, 1.0 all versions may allow an attacker to decrypt portions of the administrative session management cookie if able to intercept the latter.
References
| Link | Resource |
|---|---|
| https://fortiguard.com/psirt/FG-IR-21-126 | Vendor Advisory |
| https://fortiguard.com/psirt/FG-IR-21-126 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://fortiguard.com/psirt/FG-IR-21-126 - Vendor Advisory |
07 Nov 2023, 03:39
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all versions, 6.0 all versions; FortiOS 7.0.3 and below, 6.4.8 and below, 6.2 all versions, 6.0 all versions; FortiSwitch 7.0.3 and below, 6.4.10 and below, 6.2 all versions, 6.0 all versions; FortiProxy 7.0.1 and below, 2.0.7 and below, 1.2 all versions, 1.1 all versions, 1.0 all versions may allow an attacker to decrypt portions of the administrative session management cookie if able to intercept the latter. |
Information
Published : 2023-02-16 19:15
Updated : 2024-11-21 06:28
NVD link : CVE-2021-43074
Mitre link : CVE-2021-43074
CVE.ORG link : CVE-2021-43074
JSON object : View
Products Affected
fortinet
- fortiproxy
- fortios
- fortiweb
- fortiswitch
CWE
CWE-347
Improper Verification of Cryptographic Signature