VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 1, 2022· Updated Oct 22, 2024

CVE-2020-15936

CVE-2020-15936

Description

A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.13 and below allows attacker to disclose sensitive information via SNI Client Hello TLS packets.

Affected products

2
  • Fortinet/Fortigatellm-fuzzy
    Range: <=6.4.3, <=6.2.5, <=6.0.11, <=5.6.13
  • Fortinet/Fortinetcpe-rescue
    Range: FortiOS 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.13, 5.6.12, 5.6.11, 5.6.10, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.1, 5.6.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.