Описание
An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 7.0.0 (включая) до 7.4.1 (исключая)
cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00216
Низкий
4.8 Medium
CVSS3
5.9 Medium
CVSS3
Дефекты
CWE-295
Связанные уязвимости
CVSS3: 4.8
github
больше 1 года назад
An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors.
EPSS
Процентиль: 44%
0.00216
Низкий
4.8 Medium
CVSS3
5.9 Medium
CVSS3
Дефекты
CWE-295