CVE-2021-43068

Summary

A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal.

Affected Software

VendorProductVersion RangeStatus
FortinetFortinet FortiAuthenticatorFortiAuthenticator 6.4.0affected

Weaknesses

  • Improper access control

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References