Overview
- Description
- An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientLinux 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientAndroid 6.4 all versions, 7.0 all versions, 7.2.0 and FortiClientiOS 5.6 all versions, 6.0.0 through 6.0.1, 7.0.0 through 7.0.6 SAML SSO feature may allow an unauthenticated attacker to man-in-the-middle the communication between the FortiClient and both the service provider and the identity provider.
- Source
- psirt@fortinet.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.9
- Impact score
- 3.6
- Exploitability score
- 2.2
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
Weaknesses
- psirt@fortinet.com
- CWE-295
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:android:*:*",
"vulnerable": true,
"matchCriteriaId": "41EB773A-2E10-4A28-8135-23AB6EFF4202",
"versionEndExcluding": "7.2.1",
"versionStartIncluding": "5.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*",
"vulnerable": true,
"matchCriteriaId": "717FB16B-4D85-4041-B1AF-A50952D094DD",
"versionEndExcluding": "7.2.5",
"versionStartIncluding": "6.4"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:mac_os:*:*",
"vulnerable": true,
"matchCriteriaId": "A1022DFE-BAF2-4346-9370-EAFDDB8EA7BE",
"versionEndExcluding": "7.2.5",
"versionStartIncluding": "6.4"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "9DF7E1AD-EF2C-4FB5-80A1-533E89432E31",
"versionEndExcluding": "7.0.8",
"versionStartIncluding": "6.4"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:iphone_os:*:*",
"vulnerable": true,
"matchCriteriaId": "6FD622AA-B261-469D-8050-2780BAEE9C35",
"versionEndExcluding": "7.0.7",
"versionStartIncluding": "2.0"
}
],
"operator": "OR"
}
]
}
]