Lucene search

K
fortinetFortiGuard LabsFG-IR-20-072
HistoryOct 05, 2021 - 12:00 a.m.

FortiClientEMS - Session cookie does not expire after logout

2021-10-0500:00:00
FortiGuard Labs
www.fortiguard.com
8

0.002 Low

EPSS

Percentile

60.7%

An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

0.002 Low

EPSS

Percentile

60.7%

Related for FG-IR-20-072