UpHeron
All vulnerabilities

Servers and applications

CVE-2021-41025

Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7, including an instance of concurrent execution using shared resource with improper synchronization and one of authentication bypass by capture-replay, may allow a remote unauthenticated attacker to circumvent the…

Severity
Critical 9.8
Published
8 Dec 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiWebServers and applications · cpe:a:fortinet:fortiweb
  • Version 6.4.2
  • Version 6.4.1
  • Version 6.4.0
  • From 6.3.0 up to 6.3.15
All 9 release lines
  • From 6.0.0 up to 6.0.7
  • Version 6.1.0
  • Version 6.1.1
  • Version 6.1.2
  • From 6.2.0 up to 6.2.6
  • From 6.3.0 up to 6.3.15
  • Version 6.4.0
  • Version 6.4.1
  • Version 6.4.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41025
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41025