UpHeron
All vulnerabilities

Servers and applications

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.

Severity
Medium 4.3
Published
4 Mar 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiProxyServers and applications · cpe:a:fortinet:fortiproxy
  • Every version up to 1.2.9
  • Version 2.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-22128
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-22128