VULNERABILITY INTELLIGENCE

CVE-2020-12812

CVSS score9.8 CRITICAL

EPSS probability45.38%

CISA KEVKnown exploited vulnerability

Published2020-07-24

Last modified2026-10-02

Known Exploited Vulnerability

Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

Vendor / product: Fortinet / FortiOS

Description

An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.