[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkKek2EaKiAumsT9d7c5dnx5RBJ9B6NtiB5j-a8ZV-yg":3,"g5a-risk:CVE-2021-24019":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":55,"references":56,"referencesCount":55,"weaknesses":62,"weaknessesCount":55,"isActivelyExploited":71,"cisaInfo":27,"otxData":27,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":111,"notableEvents":112},"CVE-2021-24019","What is CVE-2021-24019?","An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)","An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the un...","2021-10-06T10:15:07.713","2021-10-14T14:39:13.373",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":37,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":29},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",8.1,2.2,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.03902,[46,46,46,46,46,46,46],"Critical",[50],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"fortinet","forticlient_endpoint_management_server","*","cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*",1,[57],{"url":58,"source":59,"tags":60},"https:\u002F\u002Ffortiguard.com\u002Fadvisory\u002FFG-IR-20-072","Fortiguard",[61],"Vendor Advisory",[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete","Base","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2021-24019? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-24019, a critical severity cyber security vulnerability from 2021. An insufficient session expiration vulnerability [CWE- ...","CVE-2021-24019, CVE-2021-24019 vulnerability, CVE-2021-24019 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, fortinet security, forticlient_endpoint_management_server vulnerability","\u002Fwhat-is\u002Fcve-2021-24019",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-24019","Cybersecurity","CVE-2021-24019, CVE-2021-24019 vulnerability, CVE-2021-24019 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":27,"Negate":27,"Nodes":100},[101],{"Operator":102,"Negate":27,"CPEMatch":103},"OR",[104,107],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":105,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":106,"VersionEndIncluding":27},"6B4FE62C-CA07-438F-AB71-EC8B67F8954B","6.2.9",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":108,"VersionStartExcluding":27,"VersionStartIncluding":109,"VersionEndExcluding":110,"VersionEndIncluding":27},"7082B032-189E-402E-9417-953C1B210234","6.4.0","6.4.2",[],[113],{"id":114,"eventType":115,"eventTime":116,"details":117,"label":118,"color":119},"662659a7-8693-4e92-821c-6702f0456cfa","LOW_EPSS_DELTA","2026-06-16T04:05:42.501935+00:00","Daily EPSS score decreased by 0.113 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":121,"version":40},1792343545255,{"score":123,"band":124,"action":125,"scoredAt":126},55,"Medium","Plan remediation","2026-10-16T06:52:12.458984+00:00"]