CVE-2015-1570

Name of the Vulnerable Software and Affected Versions FortiClient versions 5.2.3.091 for Android and 5.2.028 for iOS

Description The issue is related to the Endpoint Control protocol implementation, which does not validate certificates. This makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.

Recommendations For FortiClient version 5.2.3.091 on Android, consider disabling the Endpoint Control protocol until a patch is available. For FortiClient version 5.2.028 on iOS, consider disabling the Endpoint Control protocol until a patch is available.