ID
VAR-202111-0986
CVE
CVE-2021-32600
TITLE
FortiOS Vulnerability regarding information leakage in
Trust: 0.8
DESCRIPTION
An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and the network interface list. FortiOS There is a vulnerability related to information leakage.Information may be obtained. Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform developed by Fortinet. The system provides users with various security functions such as firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam. An attacker could exploit this vulnerability to expose sensitive information to unauthorized actors
Trust: 1.71
AFFECTED PRODUCTS
| vendor: | fortinet | model: | fortios | scope: | gte | version: | 6.2.0 | Trust: 1.0 |
| vendor: | fortinet | model: | fortios | scope: | lte | version: | 5.6.9 | Trust: 1.0 |
| vendor: | fortinet | model: | fortios | scope: | lt | version: | 6.4.7 | Trust: 1.0 |
| vendor: | fortinet | model: | fortios | scope: | gte | version: | 5.6.0 | Trust: 1.0 |
| vendor: | fortinet | model: | fortios | scope: | lt | version: | 6.2.10 | Trust: 1.0 |
| vendor: | fortinet | model: | fortios | scope: | gte | version: | 6.4.0 | Trust: 1.0 |
| vendor: | fortinet | model: | fortios | scope: | eq | version: | 7.0.0 | Trust: 1.0 |
| vendor: | fortinet | model: | fortios | scope: | lte | version: | 6.0.13 | Trust: 1.0 |
| vendor: | fortinet | model: | fortios | scope: | gte | version: | 6.0.0 | Trust: 1.0 |
| vendor: | フォーティネット | model: | fortios | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | フォーティネット | model: | fortios | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-200 | Trust: 1.1 |
| problemtype: | information leak (CWE-200) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
local
Trust: 0.6
TYPE
other
Trust: 0.6
PATCH
| title: | FG-IR-20-243 | url: | https://www.fortiguard.com/psirt/FG-IR-20-243 | Trust: 0.8 |
| title: | Fortinet FortiOS Security vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=170920 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-32600 | Trust: 3.3 |
| db: | JVNDB | id: | JVNDB-2021-015067 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202109-368 | Trust: 0.7 |
| db: | AUSCERT | id: | ESB-2021.3004 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-392572 | Trust: 0.1 |
REFERENCES
| url: | https://fortiguard.com/advisory/fg-ir-20-243 | Trust: 1.7 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-32600 | Trust: 1.4 |
| url: | https://www.auscert.org.au/bulletins/esb-2021.3004 | Trust: 0.6 |
| url: | https://vigilance.fr/vulnerability/fortios-information-disclosure-via-cli-commands-vdom-36338 | Trust: 0.6 |
SOURCES
| db: | VULHUB | id: | VHN-392572 |
| db: | JVNDB | id: | JVNDB-2021-015067 |
| db: | CNNVD | id: | CNNVD-202109-368 |
| db: | NVD | id: | CVE-2021-32600 |
LAST UPDATE DATE
2024-08-14T14:25:06.537000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-392572 | date: | 2022-06-28T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-015067 | date: | 2022-11-08T07:43:00 |
| db: | CNNVD | id: | CNNVD-202109-368 | date: | 2021-11-23T00:00:00 |
| db: | NVD | id: | CVE-2021-32600 | date: | 2022-06-28T14:11:45.273 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-392572 | date: | 2021-11-17T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-015067 | date: | 2022-11-08T00:00:00 |
| db: | CNNVD | id: | CNNVD-202109-368 | date: | 2021-09-08T00:00:00 |
| db: | NVD | id: | CVE-2021-32600 | date: | 2021-11-17T12:15:16.917 |