CVE-2020-12812—Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

漏洞名称

Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

描述

Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2020-12812

相关新闻文章

• Over 10K Fortinet firewalls exposed to actively exploited 2FA bypassJanuary 2, 2026
• Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacksDecember 29, 2025
• Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass VulnerabilityDecember 25, 2025

相关 CWE

• CWE-178
• CWE-287