CVE-2020-6649

CRITICAL · CVSS 9.8 EPSS 1.52%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-02-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-6649

Severity

CRITICAL

CVSS

9.8

EPSS

1.52%

Fortinet

Original NVD Description

An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)