{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"FortiGate versions 7.0.x ant\u00e9rieures \u00e0 7.0.2","product":{"name":"FortiGate","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiClient pour Linux, Mac et Windows versions 7.0.x ant\u00e9rieures \u00e0 7.0.2","product":{"name":"FortiClient","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiGate versions 6.4.x ant\u00e9rieures \u00e0 6.4.7","product":{"name":"FortiGate","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiProxy versions 1.x ant\u00e9rieures \u00e0 1.2.12","product":{"name":"FortiProxy","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS versions 6.2.x ant\u00e9rieures \u00e0 6.2.10","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiNAC versions 8.8.x ant\u00e9rieures \u00e0 8.8.10","product":{"name":"FortiNAC","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiWeb versions 6.4.x ant\u00e9rieures \u00e0 6.4.2","product":{"name":"FortiWeb","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS versions 7.0.x ant\u00e9rieures \u00e0 7.0.3","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiADC versions 6.1.x ant\u00e9rieures \u00e0 6.1.4","product":{"name":"FortiADC","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiWeb versions 6.2.x ant\u00e9rieures \u00e0 6.2.6","product":{"name":"FortiWeb","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiSandbox versions 3.x ant\u00e9rieures \u00e0 3.2.3","product":{"name":"FortiSandbox","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiGate versions 6.2.x ant\u00e9rieures \u00e0 6.2.10","product":{"name":"FortiGate","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS versions 5.6.x ant\u00e9rieures \u00e0 5.6.14","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS versions 6.4.x ant\u00e9rieures \u00e0 6.4.8","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS versions 6.0.x ant\u00e9rieures \u00e0 6.0.14","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiADC version 6.2.x ant\u00e9rieures \u00e0 6.2.1","product":{"name":"FortiADC","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiClient pour Linux, Mac et Windows versions 6.4.x ant\u00e9rieures \u00e0 6.4.7","product":{"name":"FortiClient","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiProxy versions 2.x ant\u00e9rieures \u00e0 2.0.4","product":{"name":"FortiProxy","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiWeb versions 6.3.x ant\u00e9rieures \u00e0 6.3.16","product":{"name":"FortiWeb","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS-6K7K versions 6.4.x ant\u00e9rieures \u00e0 6.4.3","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiSandbox versions 4.x ant\u00e9rieures \u00e0 4.0.1","product":{"name":"FortiSandbox","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiClientEMS versions 7.0.x ant\u00e9rieures \u00e0 7.0.2","product":{"name":"FortiClientEMS","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiClientEMS versions 6.4.x ant\u00e9rieures \u00e0 6.4.7","product":{"name":"FortiClientEMS","vendor":{"name":"Fortinet","scada":false}}},{"description":"Meru AP versions ant\u00e9rieures \u00e0 8.6.2","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiProxy versions 7.x ant\u00e9rieures \u00e0 7.0.1","product":{"name":"FortiProxy","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiWLC versions ant\u00e9rieures \u00e0 8.6.2","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiNAC versions 9.2.x ant\u00e9rieures \u00e0 9.2.1","product":{"name":"FortiNAC","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiNAC versions 9.1.x ant\u00e9rieures \u00e0 9.1.4","product":{"name":"FortiNAC","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiAuthenticator versions ant\u00e9rieures \u00e0 6.4.1","product":{"name":"N/A","vendor":{"name":"Fortinet","scada":false}}},{"description":"FortiOS-6K7K versions 6.2.x ant\u00e9rieures \u00e0 6.2.8","product":{"name":"FortiOS","vendor":{"name":"Fortinet","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2021-43068","url":"https://www.cve.org/CVERecord?id=CVE-2021-43068"},{"name":"CVE-2021-44168","url":"https://www.cve.org/CVERecord?id=CVE-2021-44168"},{"name":"CVE-2021-36194","url":"https://www.cve.org/CVERecord?id=CVE-2021-36194"},{"name":"CVE-2021-41028","url":"https://www.cve.org/CVERecord?id=CVE-2021-41028"},{"name":"CVE-2021-36195","url":"https://www.cve.org/CVERecord?id=CVE-2021-36195"},{"name":"CVE-2021-41014","url":"https://www.cve.org/CVERecord?id=CVE-2021-41014"},{"name":"CVE-2021-41030","url":"https://www.cve.org/CVERecord?id=CVE-2021-41030"},{"name":"CVE-2021-43067","url":"https://www.cve.org/CVERecord?id=CVE-2021-43067"},{"name":"CVE-2021-41017","url":"https://www.cve.org/CVERecord?id=CVE-2021-41017"},{"name":"CVE-2021-43064","url":"https://www.cve.org/CVERecord?id=CVE-2021-43064"},{"name":"CVE-2021-41021","url":"https://www.cve.org/CVERecord?id=CVE-2021-41021"},{"name":"CVE-2021-42759","url":"https://www.cve.org/CVERecord?id=CVE-2021-42759"},{"name":"CVE-2021-43071","url":"https://www.cve.org/CVERecord?id=CVE-2021-43071"},{"name":"CVE-2021-36173","url":"https://www.cve.org/CVERecord?id=CVE-2021-36173"},{"name":"CVE-2021-41024","url":"https://www.cve.org/CVERecord?id=CVE-2021-41024"},{"name":"CVE-2021-42752","url":"https://www.cve.org/CVERecord?id=CVE-2021-42752"},{"name":"CVE-2021-41025","url":"https://www.cve.org/CVERecord?id=CVE-2021-41025"},{"name":"CVE-2021-41015","url":"https://www.cve.org/CVERecord?id=CVE-2021-41015"},{"name":"CVE-2021-43065","url":"https://www.cve.org/CVERecord?id=CVE-2021-43065"},{"name":"CVE-2021-26110","url":"https://www.cve.org/CVERecord?id=CVE-2021-26110"},{"name":"CVE-2021-41013","url":"https://www.cve.org/CVERecord?id=CVE-2021-41013"},{"name":"CVE-2021-26108","url":"https://www.cve.org/CVERecord?id=CVE-2021-26108"},{"name":"CVE-2021-43204","url":"https://www.cve.org/CVERecord?id=CVE-2021-43204"},{"name":"CVE-2021-42758","url":"https://www.cve.org/CVERecord?id=CVE-2021-42758"},{"name":"CVE-2021-41029","url":"https://www.cve.org/CVERecord?id=CVE-2021-41029"},{"name":"CVE-2021-42760","url":"https://www.cve.org/CVERecord?id=CVE-2021-42760"},{"name":"CVE-2021-41026","url":"https://www.cve.org/CVERecord?id=CVE-2021-41026"},{"name":"CVE-2021-41027","url":"https://www.cve.org/CVERecord?id=CVE-2021-41027"},{"name":"CVE-2021-36189","url":"https://www.cve.org/CVERecord?id=CVE-2021-36189"},{"name":"CVE-2021-36180","url":"https://www.cve.org/CVERecord?id=CVE-2021-36180"},{"name":"CVE-2021-36191","url":"https://www.cve.org/CVERecord?id=CVE-2021-36191"},{"name":"CVE-2021-42757","url":"https://www.cve.org/CVERecord?id=CVE-2021-42757"},{"name":"CVE-2021-32591","url":"https://www.cve.org/CVERecord?id=CVE-2021-32591"},{"name":"CVE-2021-36190","url":"https://www.cve.org/CVERecord?id=CVE-2021-36190"},{"name":"CVE-2021-26109","url":"https://www.cve.org/CVERecord?id=CVE-2021-26109"},{"name":"CVE-2021-26103","url":"https://www.cve.org/CVERecord?id=CVE-2021-26103"},{"name":"CVE-2021-36167","url":"https://www.cve.org/CVERecord?id=CVE-2021-36167"},{"name":"CVE-2021-43063","url":"https://www.cve.org/CVERecord?id=CVE-2021-43063"},{"name":"CVE-2021-36188","url":"https://www.cve.org/CVERecord?id=CVE-2021-36188"}],"links":[],"reference":"CERTFR-2021-AVI-927","revisions":[{"description":"Version initiale","revision_date":"2021-12-08T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Injection de code indirecte \u00e0 distance (XSS)"},{"description":"Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nFortinet. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 l'int\u00e9grit\u00e9\ndes donn\u00e9es, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un\ncontournement de la politique de s\u00e9curit\u00e9.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-201 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-201"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-130 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-130"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-134 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-134"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-049 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-049"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-075 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-075"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-122 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-122"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-140 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-140"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-051 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-051"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-192 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-192"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-138 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-138"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-152 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-152"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-127 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-20-127"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-120 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-120"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-222 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-20-222"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-118 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-118"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-212 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-212"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-133 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-133"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-131 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-20-131"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-173 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-173"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-182 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-182"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-114 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-114"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-111 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-111"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-115 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-115"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-123 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-123"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-181 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-181"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-160 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-160"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-129 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-129"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-200 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-200"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-167 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-167"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-157 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-157"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-139 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-139"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-168 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-168"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-156 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-156"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-188 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-188"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-20-158 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-20-158"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-178 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-178"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-131 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-131"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-21-004 du 8 d\u00e9cembre 2021","url":"https://www.fortiguard.com/psirt/FG-IR-21-004"}]}