← CVE Intelligence

CVE-2024-54019

Fortinet / FortiClientWindows PUBLISHED

Description (CNA)

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiClientWindowsaffected 7.4.0; affected 7.2.0 through 7.2.6; affected 7.0.0 through 7.0.14

CWE

CWE-297

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.