{"id":"CVE-2020-12812","revision":"8ae4bea63f69445091e88eacd4d8b43a","records":[{"revision":"8ae4bea63f69445091e88eacd4d8b43a","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2020-12812","aliases":[],"title":"An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they…","description":"An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.","state":0,"publishedAt":"2020-07-24T22:28:43+00:00","modifiedAt":"2026-10-01T20:30:43.171+00:00","affected":[{"ecosystem":"Vendor product","name":"Fortinet FortiOS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Fortinet FortiOS\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://fortiguard.com/psirt/FG-IR-19-283"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2020-12812","license":"CVE Program Terms of Use","key":"cve-program:CVE-2020-12812","identifiers":["CVE-2020-12812"]},"retained":false,"historicalAffected":[]}],"coverage":[]}