FortiTokenMobile - Missing digital certificate validation

2022-06-0700:00:00

FortiGuard Labs

www.fortiguard.com

0.0005 Low

EPSS

Percentile

17.1%

JSON

An improper validation of certificate with host mismatch vulnerability [CWE-297] in FortiTokenMobile may allow an unauthenticated user to spoof the validation server identity and achieve a Man-in-the-Middle attack.

CPENameOperatorVersion
fortitokenandroideq5.0.3
fortitokenandroideq5.0.2
fortitokenandroideq4.5.0
fortitokenandroideq4.4.0
fortitokenandroideq4.3.0
fortitokenandroideq4.2.2
fortitokenandroideq4.2.1
fortitokenandroideq4.1.1
fortitokenandroideq4.0.1
fortitokenandroideq4.0.0

Name	Operator	Version
fortitokenandroid	eq	5.0.3
fortitokenandroid	eq	5.0.2
fortitokenandroid	eq	4.5.0
fortitokenandroid	eq	4.4.0
fortitokenandroid	eq	4.3.0
fortitokenandroid	eq	4.2.2
fortitokenandroid	eq	4.2.1
fortitokenandroid	eq	4.1.1
fortitokenandroid	eq	4.0.1
fortitokenandroid	eq	4.0.0

Rows per page:

1-10 of 301

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for FG-IR-21-024