← CVE Intelligence

CVE-2020-29012

Fortinet / Fortinet FortiSandbox PUBLISHED

Description (CNA)

An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain information about other users configured on the device, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

Affected (CNA)

Vendor / productVersions
Fortinet / Fortinet FortiSandboxaffected FortiSandbox 3.2.1,

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.