CVE-2020-15942

An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to read the password used by the FortiWeb scanner to access the device defined in the scan profile.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@fortinet.com

Published

2021-04-12

Last modified

2024-10-25

Weaknesses

CWE-522

Affected products

• Fortinet Fortiweb (Fortinet)
• Fortiweb (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-20-076
• https://www.fortiguard.com/psirt/FG-IR-20-076