CVSSv3 Score: 8.2 An Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')[CWE-90] in FortiAuthenticator may allow an authenticated attacker to bypass authentication. Successful exploitation requires either a malicious/compromised upstream IdP, or an IdP configuration that allows the user to control the NameID (or the SAML attribute used as the username). Revised on 2026-11-10 00:00:00
Este es el aviso número 106 de Fortinet PSIRT en pwned.cl.
| Categoría | Fortinet PSIRT |
|---|