Aller au contenu
Se connecter
Non notée

CVE-2020-6649 An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an…

Description

An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiIsolator Versions non publiées

Autres CVE de Fortinet FortiIsolator

Les 3 CVE de Fortinet FortiIsolator →
CVE-2021-41020 An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated,… 8.8 Élevée CVE-2020-6643 An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2… Non notée
Suivre cette CVE