CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.6. See the original NVD description below for full technical details.
CVE
CVE-2020-29012
Severity
MEDIUM
CVSS
5.6
EPSS
0.55%
Original NVD Description
An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain information about other users configured on the device, should the attacker be able to obtain that session ID (via other, hypothetical attacks)
Related CVEs
Other vulnerabilities affecting the same vendor(s)