Description
Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Fortinet FortiOS | n/a / Fortinet FortiOS | FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below | affected |