CVE-2020-15942

MEDIUM

Fortinet Fortiweb < 6.2.3 - Insufficiently Protected Credentials

Title source: rule

Description

An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to read the password used by the FortiWeb scanner to access the device defined in the scan profile.

References (2)

Scores

CVSS v3 4.3
EPSS 0.0015
EPSS Percentile 35.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-522
Status published

Affected Products (1)

fortinet/fortiweb < 6.2.3

Timeline

Published Apr 12, 2021
Tracked Since Feb 18, 2026