CVE-2021-36177

4.3 mediumEPSS 0.3%

Medium (4.3) in fortinet fortiauthenticator. EPSS 0.3% chance of exploitation in the next 30 days.

An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
Published: 2022-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiauthenticator

References

https://fortiguard.com/psirt/FG-IR-20-217
https://fortiguard.com/psirt/FG-IR-20-217

Check your stack JSON