CVE-2021-41013

An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may…

Medium · published December 8, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may allow an unauthorized and unauthenticated user to access the Log reports via their URLs.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00972 · 61.6th percentile
Published
2021-12-08T13:33Z
EPSS history
Timeline
  • 08 DEC 13:33Z
    An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may…
    cvelistv5