Description
An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors.
Metrics
CVSS 3.1 5.9/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiADC | 7.4.0; >= 7.2.0, <= 7.2.6; >= 7.1.0, <= 7.1.4; >= 7.0.0, <= 7.0.5 |
| fortinet | fortiadc | >= 7.4.0, < 7.4.1; >= 7.2.0, <= 7.2.6; >= 7.1.0, <= 7.1.4; >= 7.0.0, <= 7.0.5 |
References
- https://fortiguard.fortinet.com/psirt/FG-IR-23-480Vendor Advisory
- https://fortiguard.fortinet.com/psirt/FG-IR-23-480Vendor Advisory
Timeline
- Published
- Jul 9, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified