Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qxf7-8j2m-38vq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

EPSS

Процентиль: 61%
0.00408
Низкий

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 9.8
nvd
почти 5 лет назад

An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

EPSS

Процентиль: 61%
0.00408
Низкий

Дефекты

CWE-613