VULNERABILITY INTELLIGENCE

CVE-2020-15936

CVSS score2.6 LOW
EPSS probability0.65%
CISA KEVNot currently listed
Published2022-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N

Description

A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.13 and below allows attacker to disclose sensitive information via SNI Client Hello TLS packets.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references