CVE-2021-43071
09.12.2021, 10:15
A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiweb | 6.2.0 ≤ 𝑥 ≤ 6.2.6 |
| fortinet | fortiweb | 6.3.0 ≤ 𝑥 ≤ 6.3.16 |
| fortinet | fortiweb | 6.4.0 |
| fortinet | fortiweb | 6.4.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration