CVE-2019-6696

CVE-2019-6696 describes an improper input validation vulnerability in FortiOS versions 6.2.1, 6.2.0, 6.0.8 and below, down to 5.4.0, specifically within the administrative web user interface. An attacker could exploit this by crafting a malicious request to the initial password change webpage, leading to a URL redirect attack. This vulnerability has a CVSS v3.1 score of 6.1 (Medium), indicating it can be exploited remotely with low attack complexity, requiring user interaction, and potentially leading to low impact on confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.