CVE-2021-41013

Published: 2021-12-08T17:15Z

Last Modified: 2024-11-21T06:25Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may allow an unauthorized and unauthenticated user to access the Log reports via their URLs. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt