Lucene search
HistoryFeb 10, 2015 - 8:59 p.m.
CVE-2015-1569
fortinet
forticlient
ios
certificates
validation
man-in-the-middle
ssl
vpn
security vulnerability
nvd
6.7 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
22.8%
Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortinet:forticlient | fortinet forticlient | eq | 5.2.028 |
6.7 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
22.8%
Related for CVE-2015-1569