CVE-2020-6644

An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain…

published June 22, 2020

CVSS
—
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01028 · 63.3th percentile
Published
2020-06-22T15:23Z
EPSS history
Timeline
  • 22 JUN 15:23Z
    An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain…
    cvelistv5