CVE-2021-36177

—

CVSS 3.1

4.3 medium

EPSS

<1%p23

Published

Feb 2, 2022 (Feb 2, 2022)

Modified

Jun 17, 2026

Description

An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database.

Vendors: fortinet
Products: fortiauthenticator
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.