CVE-2021-32588: Critical severity fortinet fortiportal vulnerability
A use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below, versions 5.1.x and 5.0.x may allow a remote and unauthenticated attacker to execute unauthorized commands as root by uploading and deploying malicious web application archive files using the default hard-coded Tomcat Manager username and password.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this FortiPortal vulnerability?
The vulnerability ID for this FortiPortal vulnerability is CVE-2021-32588.
What is the severity of CVE-2021-32588?
The severity of CVE-2021-32588 is critical with a CVSS score of 9.8.
Which versions of FortiPortal are affected by CVE-2021-32588?
FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below, versions 5.1.x and 5.0.x are affected by CVE-2021-32588.
How does CVE-2021-32588 vulnerability work?
CVE-2021-32588 is a use of hard-coded credentials vulnerability that allows a remote and unauthenticated attacker to execute unauthorized commands as root by uploading and deploying malicious web application archives.
Where can I find more information about CVE-2021-32588?
You can find more information about CVE-2021-32588 in the FortiGuard advisory FG-IR-21-077.