high8.8
CVE-2020-29018
A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive …
Impact
A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiweb | from 6.3.0 through 6.3.5 |