CVE-2021-27858

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote attacker to access at least the URL "/fpui/jsp/index.jsp" leading to unknown impact, presumably some violation of confidentiality. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA004.

• CWE-862
• CWE-862

• https://www.fatpipeinc.com/support/cve-list.phpVendor Advisory
• https://www.zeroscience.mk/codes/fatpipe_auth.txtThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5682.phpThird Party Advisory
• https://www.fatpipeinc.com/support/cve-list.phpVendor Advisory
• https://www.zeroscience.mk/codes/fatpipe_auth.txtThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5682.phpThird Party Advisory

Published

Dec 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27852Deserialization of Untrusted Data vulnerability in CheckboxW…9.8
• CVE-2021-27853Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27854Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27855FatPipe WARP, IPVPN, and MPVPN software prior to versions 10…8.8
• CVE-2021-27856FatPipe WARP, IPVPN, and MPVPN software prior to versions 10…9.8
• CVE-2021-27857A missing authorization vulnerability in the web management …7.5
• CVE-2021-27859A missing authorization vulnerability in the web management …8.8
• CVE-2021-27860A vulnerability in the web management interface of FatPipe W…8.8
• CVE-2021-27861Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27862Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27876An issue was discovered in Veritas Backup Exec before 21.2. …8.1
• CVE-2021-27877An issue was discovered in Veritas Backup Exec before 21.2. …9.8