CVE-2021-22131

Name of the Vulnerable Software and Affected Versions Fortinet FortiTokenAndroid versions 5.0.3 and below Fortinet FortiTokeniOS versions 5.2.0 and below Fortinet FortiTokenWinApp versions 4.0.3 and below

Description The issue is related to improper validation of certificates with host mismatch, allowing an attacker to retrieve information via man-in-the-middle attacks.

Recommendations For Fortinet FortiTokenAndroid versions 5.0.3 and below, update to a version above 5.0.3. For Fortinet FortiTokeniOS versions 5.2.0 and below, update to a version above 5.2.0. For Fortinet FortiTokenWinApp versions 4.0.3 and below, update to a version above 4.0.3.