CVE-2020-6644

State: Published
Severity: Not scored
Published: Jun 22, 2020
Updated: Oct 25, 2024
Reserved: Jan 9, 2020

Description

An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Fortinet FortiDeceptorFortinet	3.0.0 and belowAffected Fixed in 3.0.1Affected

References

https://fortiguard.com/advisory/FG-IR-20-006

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.