CVE-2021-32600

published 2021-11-17

CVE-2021-32600: An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may…

Priority P4 12 low 3.8 CVSS 3.1

AV L AC L PR L UI N S C C L I N A N

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and the network interface list.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinet_fortios	—	—
fortinet	fortios	—	—
fortinet	fortios	—	—
fortinet	fortios	5.6.0 – 5.6.9	—
fortinet	fortios	6.0.0 – 6.0.13	—
fortinet	fortios	>= 6.2.0 < 6.2.10	6.2.10
fortinet	fortios	>= 6.4.0 < 6.4.7	6.4.7

CVSS provenance

nvd v3.1 3.8 LOW CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200