Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Moderate
CVE-2020-12812
Disclosure Date: July 24, 2020 (last updated February 14, 2024)
An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.
1
Attacker Value
Very High
CVE-2018-13379 Path Traversal in Fortinet FortiOS
Disclosure Date: June 04, 2019 (last updated October 06, 2023)
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.
9
Attacker Value
Unknown
CVE-2019-5591
Disclosure Date: August 14, 2020 (last updated October 24, 2024)
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.
1
