> Insufficient Session Expiration in SSLVPN
[DATE: 09/12/2025 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
5.3
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSLVPN may allow an attacker to maintain access to network resources via an active session not terminated after a user's password change under particular conditions outside of the attacker's control
Revised on 2025-12-09 00:00:00