Threat intelligence / Vulnerability
CVE-2020-12812
Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.
Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03
Confidence
—
Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.
Labels
CISA KEV context
Vendor / productFortinet FortiOS
Added2021-11-03
Due date2022-05-03
11 recorded
Relationships
3 external