CVE-2021-24017

4.3 mediumEPSS 0.6%

Medium (4.3) in fortinet fortimanager. EPSS 0.6% chance of exploitation in the next 30 days.

An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2021-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortimanager

References

https://fortiguard.com/advisory/FG-IR-20-189
https://fortiguard.com/advisory/FG-IR-20-189

Check your stack JSON