CVE-2021-32600: Infoleak
An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and the network interface list.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-32600?
CVE-2021-32600 has been classified as a high-severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2021-32600?
To fix CVE-2021-32600, update your FortiOS to the latest version as specified in the vendor's security advisory.
What affects CVE-2021-32600?
CVE-2021-32600 affects FortiOS versions 5.6.x, 6.0.x, 6.2.0 through 6.2.9, 6.4.0 through 6.4.6, and 7.0.0.
Who is impacted by CVE-2021-32600?
Local and authenticated users assigned to specific Virtual Domain (VDOM) within FortiOS are impacted by CVE-2021-32600.
What type of information can be accessed due to CVE-2021-32600?
CVE-2021-32600 may allow unauthorized users to access sensitive information like the admin account list from other VDOMs.