CVE-2012-4948 in FortiOSinfo

Summary

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

09/17/2012

Disclosure

11/14/2012

Entries

VDB-6883 (1)

CPE

ready

CVSS

5.3

EPSS

0.00174

Activities

Very Low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!