rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-12750 
An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via SPEN. The Samsung ID is SVE-2020-17019 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:37:10.000Z
CVE-2020-12751 
An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:39:21.000Z
CVE-2020-12752 
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. Attackers can determine user credentials via a brute-force attack against the Gatekeeper trustlet. The Samsung ID is SVE-2020-16908 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:40:26.000Z
CVE-2020-12753 
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because of an EL1/EL3 coldboot vulnerability involving raw_resources. The LG ID is LVE-SMP-200006 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:45:20.000Z
CVE-2020-12754 
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via the window system service. The LG ID is LVE-SMP-170011 (May 2020).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:47:05.000Z
CVE-2020-12755 
fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T15:52:06.000Z
CVE-2020-12757 
HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the default time-to-live lease duration instead of the engine-configured setting. This may lead to generated GCP credentials being valid for longer than intended. Fixed in 1.4.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T18:46:12.000Z
CVE-2020-12758 
HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-11T19:23:26.000Z
CVE-2020-12759 
Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-21T04:39:00.000Z
CVE-2020-12760 
An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7. The ActiveMQ channel configuration allowed for arbitrary deserialization of Java objects (aka ActiveMQ Minion payload deserialization), leading to remote code execution for any authenticated channel user regardless of its assigned permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:54:33.000Z
CVE-2020-12761 
modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via an icon with many colors in its color map.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T17:21:51.000Z
CVE-2020-12762 
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T00:00:00.000Z
CVE-2020-12763 
TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd (in /sbin) when parsing a long "Authorization: Basic" RTSP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-13T14:01:47.000Z
CVE-2020-12764 
Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T18:35:21.000Z
CVE-2020-12765 
Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T18:35:11.000Z
CVE-2020-12766 
Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T18:34:59.000Z
CVE-2020-12767 
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T20:17:00.000Z
CVE-2020-12768 
An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak, aka CID-d80b64ff297e. NOTE: third parties dispute this issue because it's a one-time leak at the boot, the size is negligible, and it can't be triggered at will
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T20:16:53.000Z
CVE-2020-12769 
An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T20:16:45.000Z
CVE-2020-12770 
An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T20:16:36.000Z
CVE-2020-12771 
An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T20:16:20.000Z
CVE-2020-12772 
An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the (NT)LM hashes of the user are sent with the HTTP request. This allows an attacker to collect these hashes, crack them, and potentially compromise the computer. (ROAR can be configured for automatic access. Also, access can occur if the user clicks.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-12T19:36:54.000Z
CVE-2020-12773 Realtek ADSL/PON Modem SoC - Security Misconfiguration
A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default password to execute arbitrary commands remotely via the build-in network monitoring tool.
Problem types: description: Security Misconfiguration
Affected products: vendor: Realtek
product: ADSL/PON Modem SoC
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 9.6
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Published: 2020-06-08T07:20:18.866Z
CVE-2020-12774 D-Link DSL-7740C - Command Injection
D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: D-Link
product: DSL-7740C
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2020-07-22T07:20:17.723Z
CVE-2020-12775 Hicos citizen certificate client-side component - Command Injection
Hicos citizen certificate client-side component does not filter special characters for command parameters in specific web URLs. An unauthenticated remote attacker can exploit this vulnerability to perform command injection attack to execute arbitrary system command, disrupt system or terminate service.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: Hicos
product: citizen certificate client-side component
vendor: Hicos
product: citizen certificate client-side component
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-03-01T01:55:17.625Z
CVE-2020-12776 Openfind Mail2000 - Broken Access Control
Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.
Problem types: description: Broken Access Control
Affected products: vendor: Openfind
product: Mail2000
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N
version: 3.1
Published: 2020-09-01T08:10:17.915Z
CVE-2020-12777 Combodo iTop - Broken Access Control
A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information.
Problem types: description: Broken Access Control
Affected products: vendor: Combodo
product: iTop
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-08-10T02:45:38.090Z
CVE-2020-12778 Combodo iTop - Reflected XSS
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.
Problem types: description: Reflected XSS
Affected products: vendor: Combodo
product: iTop
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
version: 3.1
Published: 2020-08-10T02:45:38.492Z
CVE-2020-12779 Combodo iTop - Stored XSS
Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script.
Problem types: description: Stored XSS
Affected products: vendor: Combodo
product: iTop
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
version: 3.1
Published: 2020-08-10T02:45:38.893Z
CVE-2020-12780 Combodo iTop - Security Misconfiguration
A security misconfiguration exists in Combodo iTop, which can expose sensitive information.
Problem types: description: Security Misconfiguration
Affected products: vendor: Combodo
product: iTop
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-08-10T02:45:39.363Z
CVE-2020-12781 Combodo iTop - CSRF
Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Combodo
product: iTop
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
version: 3.1
Published: 2020-08-10T02:45:39.815Z
CVE-2020-12782 Openfind MailGates - Command Injection
Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files.
Problem types: description: Command Injection
Affected products: vendor: Openfind
product: MailGates
vendor: Openfind
product: MailAudit
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-06-23T06:05:37.538Z
CVE-2020-12783 
Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T13:51:54.000Z
CVE-2020-12784 
cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:49:58.000Z
CVE-2020-12785 
cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T15:51:38.000Z
CVE-2020-12787 
Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T13:24:38.000Z
CVE-2020-12788 
CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T13:24:41.000Z
CVE-2020-12789 
The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T13:24:44.000Z
CVE-2020-12790 
In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-11T18:08:04.000Z
CVE-2020-12797 
HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-11T19:37:19.000Z
CVE-2020-12798 
Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog that is reachable via the Certificate-Based Authentication option of the Wireless Network Connection screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T17:33:42.000Z
CVE-2020-12800 
The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supported_type to php% and uploading a .php% file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-08T16:25:13.000Z
CVE-2020-12801 Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save
If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.
Problem types: cwe_id: CWE-311
description: CWE-311 Missing Encryption of Sensitive Data
Affected products: vendor: The Document Foundation
product: LibreOffice
Credits: lang: en
value: Thanks to Tomas Florian <tomas@armoreye.ca> for raising awareness of the issue
Published: 2020-05-18T14:20:08.325Z
CVE-2020-12802 remote graphics contained in docx format retrieved in 'stealth mode'
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: The Document Foundation
product: LibreOffice
Published: 2020-06-08T15:23:05.479Z
CVE-2020-12803 XForms submissions could overwrite local files
ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
Problem types: description: xforms submission target on local file system allowed
Affected products: vendor: The Document Foundation
product: LibreOffice
Published: 2020-06-08T15:43:09.400Z
CVE-2020-12811 
An improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3and FortiAnalyzer 6.2.0, 6.2.1, 6.2.2, and 6.2.3 may allow an attacker to execute a cross site scripting (XSS) via the Identify Provider name field.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiManager, FortiAnalyzer
Published: 2020-09-24T13:36:12.000Z
CVE-2020-12812 
An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: Fortinet FortiOS
Published: 2020-07-24T22:28:43.000Z
CVE-2020-12814 
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiAnalyzer
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.1
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: NOT_DEFINED
integrityImpact: LOW
privilegesRequired: LOW
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: CHANGED
temporalScore: 4.1
temporalSeverity: MEDIUM
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N/E:X/RL:X/RC:X
version: 3.1
Published: 2021-11-02T17:56:02.000Z
CVE-2020-12815 
An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiTester
Published: 2020-09-24T13:33:14.000Z
CVE-2020-12816 
An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiNAC
Published: 2020-09-24T13:29:01.000Z
CVE-2020-12817 
An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiAnalyzer
Published: 2020-09-24T13:31:29.000Z
CVE-2020-12818 
An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.
Problem types: description: Improper Access Control
Affected products: vendor: Fortinet
product: Fortinet FortiOS
Published: 2020-09-24T13:30:18.000Z