CVE-2019-6696

2020-03-1522:03:22

fortinet

www.cve.org

EPSS

0.001

Percentile

33.8%

JSON

An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage.

CNA Affected

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.1"
      },
      {
        "status": "affected",
        "version": "6.2.0"
      },
      {
        "status": "affected",
        "version": "6.0.8 and below until 5.4.0"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-19-179

EPSS

0.001

Percentile

33.8%

JSON

Related for CVELIST:CVE-2019-6696