CVE-2021-41030

MEDIUM

FortiClient EMS <7.0.1, <6.4.4 - Auth Bypass

Title source: llm

Description

An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.

References (1)

[Patch, Vendor Advisory] https://fortiguard.com/advisory/FG-IR-21-192

Scores

CVSS v3 5.4

EPSS 0.0024

EPSS Percentile 46.7%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-294

Status published

Products (3)

fortinet/forticlient_enterprise_management_server 7.0.0

fortinet/forticlient_enterprise_management_server 7.0.1

fortinet/forticlient_enterprise_management_server 6.2.0 - 6.2.9

Published Dec 08, 2021

Tracked Since Feb 18, 2026