CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1–1 of 1 advisories (Page 1/1)
2020-07-24
Fortinet FortiOS SSL VPN Multi-Factor Authentication (MFA) Bypass Vulnerability (CVE-2020-12812)
[Affected Scope] SSL VPN service running on FortiOS 6.4.0, 6.2.0 to 6.2.3, and 6.0.9 and below
[Impact] Attackers can bypass the second-factor authentication (FortiToken) and gain unauthorized access to the internal network by altering the case of the username
[Mitigation] Immediately upgrade FortiOS to the patched versions (6.4.1, 6.2.4, 6.0.10 or higher) and audit SSL VPN access logs