CVE-2020-12812 Fortinet FortiOS
Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.
- CVSS
- not scored
On CISA’s exploited list
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- known