CVE-2020-6641 MEDIUM

CVE-2020-6641

Vendor Fortinet
Product Fortinet FortiPresence
Published June 2, 2021
Last update October 25, 2024

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters.

Key dates

02Disclosure timeline

June 2, 2021 CVE published
October 25, 2024 Record updated