CVE-2021-32584CWE-284

An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below…

Medium · published March 17, 2025

CVSS v3.1
4.8
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionality by just specifying the correct URL. The vulnerability applies only to limited CGI resources and might allow the unauthorized party to access configuration details.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
CVSS v4.0
Not supplied
EPSS
0.00640 · 50.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-03-17T13:05Z
EPSS history
Timeline
  • 17 MAR 13:05Z
    An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below…
    cvelistv5