CVE-2020-6641 - Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2

CVE-2020-6641

Summary

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters.

References

https://fortiguard.com/advisory/FG-IR-19-258

Vulnerable Configurations

cpe:2.3:a:fortinet:fortipresence:-:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:-:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortipresence:4.3.0:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 03-05-2022 - 16:04)
Impact:
Exploitability:

CWE

CWE-639

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:N/A:N

Last major update

03-05-2022 - 16:04

Published

02-06-2021 - 11:15

Last modified

03-05-2022 - 16:04