PT-2022-9230
CVE-2021-22131
·
تاريخ النشر
2022-07-18
·
تاريخ التحديث
2022-07-25
الوصف من
CVSS 3.1
6.4
متوسطةالمقاييسAV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Fortinet FortiTokenAndroid versions 5.0.3 and below
Fortinet FortiTokeniOS versions 5.2.0 and below
Fortinet FortiTokenWinApp versions 4.0.3 and below
Description
The issue is related to improper validation of certificates with host mismatch, allowing an attacker to retrieve information via man-in-the-middle attacks.
Recommendations
For Fortinet FortiTokenAndroid versions 5.0.3 and below, update to a version above 5.0.3.
For Fortinet FortiTokeniOS versions 5.2.0 and below, update to a version above 5.2.0.
For Fortinet FortiTokenWinApp versions 4.0.3 and below, update to a version above 4.0.3.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾