CVE-2021-24019

moderate-risk
Published 2021-10-06

An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

Do I need to act?

!
15.2% chance of exploitation in next 30 days
EPSS score — higher than 85% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10 High
NETWORK / HIGH complexity

Affected Products (1)

Forticlient Endpoint Management Server

Affected Vendors

Fortinet

References (2)

Vendor Advisory https://fortiguard.com/advisory/FG-IR-20-072
Vendor Advisory https://fortiguard.com/advisory/FG-IR-20-072
42
/ 100
moderate-risk
Severity 24/34 · High
Exploitability 13/34 · Low
Exposure 5/34 · Minimal