Vulnerabilities > CVE-2021-41020 - Unspecified vulnerability in Fortinet Fortiisolator 2.3.0/2.3.1/2.3.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 3 |