Skip to content
fr Sign in
Not rated

CVE-2020-6649 An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an…

Description

An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiIsolator Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiIsolator

The 3 CVEs of Fortinet FortiIsolator →
CVE-2021-41020 An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated,… 8.8 High CVE-2020-6643 An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2… Not rated
Track this CVE