What is CVE-2021-24005?

CVE-2021-24005 is a medium-severity vulnerability in Fortinet Fortiauthenticator, classified under Use of Hard-coded Credentials. CVSS score: 4.0/10. Published 2021-07-06.

How severe is CVE-2021-24005?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Vulnerability in Fortinet Fortiauthenticator

CVE-2021-24005

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via kno…

EPSS: 0.006 (43.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Fortinet Fortiauthenticator — versions FortiAuthenticator versions before 6.3.0.

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-24005?: CVE-2021-24005 is a medium-severity vulnerability in Fortinet Fortiauthenticator, classified under Use of Hard-coded Credentials. CVSS score: 4.0/10. Published 2021-07-06.
How severe is CVE-2021-24005?: Medium severity. CVSS v3 base score is 4.0 out of 10.