Skip to content
OpenAdvisories
Unscored CVE-2020-29018 EUVD-2020-21400GHSA-53jq-rch4-w6wr

A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and…

Published Jan 14, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiWeb Category: Network devices

Description

A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiWeb FortiWeb 6.3.0 through 6.3.5 —

References