CVE-2020-15942

Summary

An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to read the password used by the FortiWeb scanner to access the device defined in the scan profile.

Affected Software

Weaknesses

• Information disclosure

ADP Enrichment

CVE Program Container

Additional References

• https://fortiguard.com/advisory/FG-IR-20-076
• https://www.fortiguard.com/psirt/FG-IR-20-076

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://fortiguard.com/advisory/FG-IR-20-076
• https://www.fortiguard.com/psirt/FG-IR-20-076

• ←Previous
• Next→