CVE-2013-6990 Privilege escalation in n/a
Remote administrators can escalate privileges via the command line interface in FortiAuthenticator, requiring an upgrade to secure the system.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-6990?
CVE-2013-6990 is a critical vulnerability in n/a, published on 30 Apr 2014. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.
Weakness: CWE-264
Which versions are affected by CVE-2013-6990?
It affects 1 product.
Products include Fortinet Fortiauthenticator.
How do I fix CVE-2013-6990?
No fix has been published for CVE-2013-6990 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-6990 being exploited?
There is no known exploitation of CVE-2013-6990 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2026-44277 Missing authorization in FortiAuthenticator
- CVE-2021-43067 Information disclosure in Fortinet FortiAuthenticator
- CVE-2021-22124 Denial of service in Fortinet FortiSandbox, FortiAuthenticator
- CVE-2015-1455 Hardcoded credentials in n/a
- CVE-2025-53379 Information disclosure in FortiAuthenticator
Sources
Also known as GHSA-vxhj-hm67-fv2j.