PT-2015-5359
CVE-2015-1570
·
تاريخ النشر
2015-02-10
·
تاريخ التحديث
2015-02-11
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
FortiClient versions 5.2.3.091 for Android and 5.2.028 for iOS
Description
The issue is related to the Endpoint Control protocol implementation, which does not validate certificates. This makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.
Recommendations
For FortiClient version 5.2.3.091 on Android, consider disabling the Endpoint Control protocol until a patch is available.
For FortiClient version 5.2.028 on iOS, consider disabling the Endpoint Control protocol until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾