Fortinet FortiOS Security Restriction Bypass Vulnerability
Last Update Date:
5 Jan 2026
Release Date:
16 Jul 2020
13025
Views
RISK: High Risk
TYPE: Operating Systems - Networks OS
A vulnerability was identified in Fortinet FortiOS, a remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.
Note:
CVE-2020-12812 is being exploited in the wild. In specific configurations, due to differences in behavior of LDAP Directories, FortiGates can allow LDAP users with two-factor authentication (2FA) configured to bypass 2FA and instead authenticate against LDAP directly. Hence, the risk level is rated as High Risk.
[Updated on 2026-01-05]
Updated Description, Risk Level and Related Links.
Impact
- Security Restriction Bypass
System / Technologies affected
- FortiOS 6.0.9 and prior versions
- FortiOS 6.2.0 - 6.2.3
- FortiOS 6.4.0
Solutions
Before installation of the software, please visit the vendor web-site for more details.
- Apply fixes issued by the vendor:
FortiOS 6.0.10 or later version
FortiOS 6.2.4 or later version
FortiOS 6.4.1 or later version
Vulnerability Identifier
Source
Related Link
Share with