← Database

CVE-2021-36190

MEDIUM CVSS: 5.5 Published: 2021-12-08 Modified: 2026-06-17

Description

A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests.

Affected Platforms

Fortinet Fortiweb

Weakness Type

NVD-CWE-Other

References