← CVE Intelligence

CVE-2020-6644

Fortinet / Fortinet FortiDeceptor PUBLISHED

Description (CNA)

An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks.

Affected (CNA)

Vendor / productVersions
Fortinet / Fortinet FortiDeceptoraffected 3.0.0 and below; affected Fixed in 3.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.