[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fs2pnOMWXd75SYX6EyOv2tc3b7xQTKgKgpO8E6rnY3aA":3,"g5a-risk:CVE-2021-41030":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":27,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":64,"references":65,"referencesCount":72,"weaknesses":73,"weaknessesCount":72,"isActivelyExploited":82,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":127,"notableEvents":128},"CVE-2021-41030","What is CVE-2021-41030?","An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.","An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticat...","2021-12-08T18:15:18.613","2021-12-10T16:57:44.123",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":40,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":38,"ImpactScore":39},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":35,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":37,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","ADJACENT_NETWORK",5.4,"MEDIUM",2.8,2.5,[41],{"Source":17,"Type":18,"CVSSData":42,"BaseSeverity":37,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":43,"VectorString":44,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":23,"BaseScore":46,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,10,4.9,0.00987,[49,49,49,49,49,49,49],"Critical",[53,58,61],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"fortinet","forticlient_enterprise_management_server","*","cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"7.0.0","cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":62,"criteria":63,"vulnerable":4},"7.0.1","cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.1:*:*:*:*:*:*:*",3,[66],{"url":67,"source":68,"tags":69},"https:\u002F\u002Ffortiguard.com\u002Fadvisory\u002FFG-IR-21-192","Fortiguard",[70,71],"Patch","Vendor Advisory",1,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-294","Authentication Bypass by Capture-replay","A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).","Capture-replay attacks are common and can be difficult to defeat without cryptography. They are a subset of network injection attacks that rely on observing previously-sent valid commands, then changing them slightly if necessary and resending the same commands to the server.","Incomplete","Base","Simple",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2021-41030? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-41030, a critical severity cyber security vulnerability from 2021. An authentication bypass by capture-replay vulnerabilit...","CVE-2021-41030, CVE-2021-41030 vulnerability, CVE-2021-41030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, fortinet security, forticlient_enterprise_management_server vulnerability","\u002Fwhat-is\u002Fcve-2021-41030",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-41030","Cybersecurity","CVE-2021-41030, CVE-2021-41030 vulnerability, CVE-2021-41030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":27,"Negate":27,"Nodes":111},[112],{"Operator":113,"Negate":27,"CPEMatch":114},"OR",[115,119,123,125],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":117,"VersionEndExcluding":27,"VersionEndIncluding":118},"9C331B17-F3B4-42C1-8050-F35414C5686C","6.2.0","6.2.9",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":121,"VersionEndExcluding":27,"VersionEndIncluding":122},"625EF8A7-1E40-4C70-866D-1638AE4C7BB1","6.4.0","6.4.4",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8C448C03-C45D-4348-BE21-352FFCA4DEFD",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"52CF0873-A8E2-44CB-805E-C028A9A458C3",[],[],{"lastModified":11,"cacheTime":130,"version":43},1792346698275,{"score":132,"band":133,"action":134,"scoredAt":135},55,"Medium","Plan remediation","2026-10-16T06:52:38.477792+00:00"]