CVE-2023-50178

Published: Jul 9, 2024Modified: Jun 17, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and various remote servers such as private SDN connectors and FortiToken Cloud.

Affected (6)

Products: Fortinet: Fortiadc

Fortinet

1 product

Fortiadc

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiadc	6.0.0 ≤ version ≤ 6.0.4
Fortinet Fortiadc	6.1.0 ≤ version ≤ 6.1.6
Fortinet Fortiadc	6.2.0 ≤ version ≤ 6.2.6
Fortinet Fortiadc	7.0.0 ≤ version ≤ 7.0.2
Fortinet Fortiadc	7.1.0 ≤ version ≤ 7.2.3
Fortinet Fortiadc	Version 7.4.0

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://fortiguard.fortinet.com/psirt/FG-IR-22-298

Source: psirt@fortinet.com

Third Party Advisory

https://fortiguard.fortinet.com/psirt/FG-IR-22-298

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.