CVE-2023-50178

Published: Jul 9, 2024Modified: Nov 21, 2024

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and various remote servers such as private SDN connectors and FortiToken Cloud.

Affected (6)

Products: Fortinet: Fortiadc

Fortinet

1 product

Fortiadc

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiadc	From 6.0.0 to 6.0.4
Fortinet Fortiadc	From 6.1.0 to 6.1.6
Fortinet Fortiadc	From 6.2.0 to 6.2.6
Fortinet Fortiadc	From 7.0.0 to 7.0.2
Fortinet Fortiadc	From 7.1.0 to 7.2.3
Fortinet Fortiadc	Version 7.4.0

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://fortiguard.fortinet.com/psirt/FG-IR-22-298

Source: psirt@fortinet.com

Third Party Advisory

https://fortiguard.fortinet.com/psirt/FG-IR-22-298

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.