Aller au contenu
Se connecter
Non notée

CVE-2020-6644 An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the…

Description

An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiDeceptor Versions non publiées

Autres CVE de Fortinet FortiDeceptor

Les 3 CVE de Fortinet FortiDeceptor →
CVE-2022-38373 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management… 8.0 Élevée CVE-2022-30302 Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x,… 6.5 Moyenne
Suivre cette CVE