296,147
Total vulnerabilities in the database
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortios | 7.6.0 | 7.6.0.x |
| fortinet / fortios | 7.4.0 | 7.4.8 |
| fortinet / fortios | 6.4.0 | 7.2.11 |
| fortinet / fortisase | 24.4.60 | 24.4.60.x |