Vulnerability Description
An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to read the password used by the FortiWeb scanner to access the device defined in the scan profile.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortiweb | >= 6.2.0, <= 6.2.3 |
Related Weaknesses (CWE)
References
- https://fortiguard.com/advisory/FG-IR-20-076Vendor Advisory
- https://www.fortiguard.com/psirt/FG-IR-20-076Vendor Advisory
- https://fortiguard.com/advisory/FG-IR-20-076Vendor Advisory
- https://www.fortiguard.com/psirt/FG-IR-20-076Vendor Advisory
FAQ
What is CVE-2020-15942?
CVE-2020-15942 is a vulnerability with a CVSS score of 4.3 (MEDIUM). An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to re...
How severe is CVE-2020-15942?
CVE-2020-15942 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-15942?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortiweb.