CVE-2016-8495

Published: Feb 13, 2017Modified: May 13, 2026

7.4

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.

Affected (18)

Products: Fortinet: Fortimanager Firmware

Fortinet

1 product

Fortimanager Firmware

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortimanager Firmware	Version 5.0.10
Fortinet Fortimanager Firmware	Version 5.0.11
Fortinet Fortimanager Firmware	Version 5.0.3
Fortinet Fortimanager Firmware	Version 5.0.4
Fortinet Fortimanager Firmware	Version 5.0.5
Fortinet Fortimanager Firmware	Version 5.0.6
Fortinet Fortimanager Firmware	Version 5.0.7
Fortinet Fortimanager Firmware	Version 5.0.8
Fortinet Fortimanager Firmware	Version 5.0.9
Fortinet Fortimanager Firmware	Version 5.2.0
Fortinet Fortimanager Firmware	Version 5.2.1
Fortinet Fortimanager Firmware	Version 5.2.2
Fortinet Fortimanager Firmware	Version 5.2.3
Fortinet Fortimanager Firmware	Version 5.2.4
Fortinet Fortimanager Firmware	Version 5.2.6
Fortinet Fortimanager Firmware	Version 5.2.7