CVE-2020-29018

Description

A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter.

Reserved 2020-11-24 | Published 2021-01-14 | Updated 2024-10-25 | Assigner fortinet

Problem types

Execute unauthorized code or commands

Product status

FortiWeb 6.3.0 through 6.3.5
affected

References

www.fortiguard.com/psirt/FG-IR-20-123

cve.org (CVE-2020-29018)

nvd.nist.gov (CVE-2020-29018)

Download JSON