Lucene search
FortinetCVELIST:CVE-2020-6641HistoryJun 02, 2021 - 10:26 a.m.
CVE-2020-6641
2021-06-0210:26:11
fortinet
www.cve.org
4
cve-2020-6641
fortinet
authorization bypass
user data
administration interface
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
5.1
Confidence
High
EPSS
0.001
Percentile
22.7%
Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters.
CNA Affected
[
{
"product": "Fortinet FortiPresence",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiPresence 2.1.0 and earlier"
}
]
}
]References
Related
nvd
nvd
CVE-2020-6641
2021-06-02 11:15:07
prion
prion
Authorization
2021-06-02 11:15:00
fortinet
fortinet
Authorizations Bypass in the FortiPresence portal parameters
2020-03-09 00:00:00
cve
cve
CVE-2020-6641
2021-06-02 11:15:07
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
5.1
Confidence
High
EPSS
0.001
Percentile
22.7%
Related for CVELIST:CVE-2020-6641