CVE-2015-1570 in Fortinet FortiClient
Résumé (Anglaise)
The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.
Réserver
10/02/2015
Divulgation
10/02/2015
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 74156 | Fortinet FortiClient Certificates chiffrement faible | 310 | Non défini | Non défini | CVE-2015-1570 |