An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionality by just specifying the correct URL. The vulnerability applies only to limited CGI resources and might allow the unauthorized party to access configuration details.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-20-138 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Jul 2025, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet fortiwlc
Fortinet |
|
| CPE | cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:* |
|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-20-138 - Vendor Advisory |
17 Mar 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-17 14:15
Updated : 2025-07-24 20:17
NVD link : CVE-2021-32584
Mitre link : CVE-2021-32584
JSON object : View
Products Affected
fortinet
- fortiwlc
CWE
CWE-284
Improper Access Control