Aller au contenu
Se connecter
7.5 Élevée

CVE-2020-12812 Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

Exploitation active constatée

· catalogue CISA KEV
Action attendue Apply updates per vendor instructions.
Campagnes de rançongiciel Utilisation connue
Faiblesse CWE-287, CWE-178

Description

An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiOS Versions non publiées

Autres CVE de Fortinet FortiOS

Les 3 CVE de Fortinet FortiOS →
CVE-2018-13371 An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing… Non notée CVE-2019-5593 Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS… Non notée
Suivre cette CVE