Description (CNA)
An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiAnalyzer | affected 7.0.0 through 7.0.2; affected 6.4.0 through 6.4.7; affected 6.2.0 through 6.2.11; affected 6.0.0 through 6.0.12 |
| Fortinet / FortiSandbox | affected 4.0.0 through 4.0.2; affected 3.2.0 through 3.2.4; affected 3.1.0 through 3.1.5; affected 3.0.0 through 3.0.7 |
| Fortinet / FortiManager | affected 7.0.0 through 7.0.1; affected 6.4.0 through 6.4.6; affected 6.2.0 through 6.2.11; affected 6.0.0 through 6.0.12 |
CWE
CWE-297
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.