CVE-2013-6990
HighSummary
FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.
Risk Assessment
This vulnerability may lead to unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade FortiAuthenticator to version 3.0 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in FortiAuthenticator
See all- CVE-2025-53379High
An out-of-bounds read vulnerability in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.2 and all versions of 6.5 may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request.
- CVE-2025-59923Low
An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, 6.5 all versions, 6.4 all versions, 6.3 all versions may allow an authenticated attacker with at least read-only admin permission to obtain the credentials of other administrators' messaging services via crafted requests.
- CVE-2025-57823Low
Fortinet FortiAuthenticator versions 6.6.0 through 6.6.6, and all versions of 6.5, 6.4, 6.3 have a forced browsing vulnerability that allows an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints.
Original NVD description (English source)
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS