CVE-2019-17654
CVE-2019-17654
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Mar 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH) attack.
Affected products
Fortinet · Fortinet FortiManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →