Fortinet FortiWeb LogReport API Controller Heap-Based Buffer Overflow Vulnerability

CVE-2021-43071 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller.

Learn more about our Cis Benchmark Audit For Fortinet.