Description (CNA)
A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.16, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 through 6.0.7, 5.9.0 through 5.9.1 may allow a remote, unauthenticated attacker to infer the session identifier of other users and possibly usurp their session.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiWeb | affected 6.4.0 through 6.4.2; affected 6.3.0 through 6.3.16; affected 6.2.0 through 6.2.6; affected 6.1.0 through 6.1.2; affected 6.0.0 through 6.0.7; affected 5.9.0 through 5.9.1; affected 5.8.5 through 5.8.7; affected 5.8.0 through 5.8.3; affected 5.7.0 through 5.7.3; affected 5.6.0 through 5.6.2 |
CWE
CWE-384
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.