exploitDog

CVE-2020-6641

Опубликовано: 02 июн. 2021

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters.

Ссылки

https://fortiguard.com/advisory/FG-IR-19-258
Vendor Advisory
https://fortiguard.com/advisory/FG-IR-19-258
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fortinet:fortipresence:*:*:*:*:*:*:*:*

Версия до 20.1 (исключая)

EPSS

Процентиль: 33%

0.00134

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-639

Связанные уязвимости

GHSA-jxf8-g6gq-m62f

CVSS3: 4.3

github

больше 3 лет назад

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters.

EPSS

Процентиль: 33%

0.00134

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-639