Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37rj-769r-rwrv

Опубликовано: 15 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

An improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2.6 and 7.4.0 - 7.4.1 allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch.

An improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2.6 and 7.4.0 - 7.4.1 allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch.

EPSS

Процентиль: 23%
0.00077
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 4.8
nvd
почти 2 года назад

An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4 all versions allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch.

CVSS3: 4.6
fstec
больше 2 лет назад

Уязвимость реализации протокола FortiLink операционных систем FortiOS, позволяющая нарушителю реализовать атаку типа «человек посередине»

EPSS

Процентиль: 23%
0.00077
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-295