CVE-2019-6696
CVE-2019-6696
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Mar 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage.
Affected products
Fortinet · Fortinet FortiOSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →