An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks.
References
Link | Resource |
---|---|
https://fortiguard.com/advisory/FG-IR-20-006 | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2020-06-22 16:15
Updated : 2020-06-29 01:20
NVD link : CVE-2020-6644
Mitre link : CVE-2020-6644
CVE.ORG link : CVE-2020-6644
JSON object : View
Products Affected
fortinet
- fortideceptor
CWE
CWE-613
Insufficient Session Expiration