Skip to content
Sign in
Not rated

CVE-2020-6644 An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the…

Description

An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiDeceptor Versions not published

Other CVEs of Fortinet FortiDeceptor

The 3 CVEs of Fortinet FortiDeceptor →
CVE-2022-38373 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management… 8.0 High CVE-2022-30302 Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x,… 6.5 Medium
Track this CVE