CVE-2012-4948

MediumCVSS 5.3/10Last modified Jun 16, 2026

Description

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.

Metrics

CVSS 2.0 5.3/10AV:A/AC:H/Au:N/C:C/I:P/A:N

Weakness enumeration

CWE-295

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/87048
http://www.kb.cert.org/vuls/id/111708Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/56382Third Party Advisory, VDB Entry
http://osvdb.org/87048
http://www.kb.cert.org/vuls/id/111708Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/56382Third Party Advisory, VDB Entry

Timeline

Published: Nov 14, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-49496.5SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter CVE-2012-49504.3Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to i CVE-2012-49517.5Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attack CVE-2012-49525.0Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, wh CVE-2012-49539.3The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVir CVE-2012-49543.5The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing th CVE-2012-49554.3Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7 CVE-2012-495610.0Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large numbe CVE-2012-49577.8Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /F CVE-2012-49587.8Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /F CVE-2012-495910.0Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 13 CVE-2012-49606.5The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S230