CVSSv3 Score: 5.3
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSLVPN may allow an attacker to maintain access to network resources via an active session not terminated after a user’s password change under particular conditions outside of the attacker’s control
Revised on 2025-12-09 00:00:00
