CVE-2020-6641

MEDIUM

FortiPresence < 20.1 - Authorization Bypass via Portal Manager or Portal Users Parameters

Title source: llm

Description

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://fortiguard.com/advisory/FG-IR-19-258

Scores

CVSS v3 4.3

EPSS 0.0059

EPSS Percentile 43.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-639

Status published

Products (1)

fortinet/fortipresence < 20.1

Published Jun 02, 2021

Tracked Since Feb 18, 2026