CVE-2020-29012

CVE-2020-29012 describes an insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below. This flaw allows an attacker to potentially reuse unexpired administrator session IDs to gain information about other users, provided they can first obtain a valid session ID through other means. Rated with a CVSS score of 5.3 (Medium), the attack vector is network-based with low complexity, requiring no user interaction, and primarily impacts confidentiality. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.