864 matches found
Mulitple Vulnerabilities in FortiClient
...
Fortinet FortiClient SSLVPN Linux Client Local Privilege Vulnerability
Fortinet FortiClient is a Fortinet security software solution for endpoints that provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication, etc. FortiClient SSLVPN Linux client is a Linux client software for SSL VPN Virtual Private Network products...
FortiClient SSLVPN Linux client local privilege escalation vulnerability
...
FortiClient Android and iOS multiple vulnerabilities
...
Fortinet FortiClient Man-in-the-Middle Attack Vulnerability (CNVD-2015-01147)
Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. Fortinet FortiClient 5.2.3.091 for Android 5.2.028 for iOS suffers from a man-in-the-middle attack vulnerability that could allow an attacker to spoof a server wit...
Fortinet FortiClient Man-in-the-Middle Attack Vulnerability (CNVD-2015-01148)
Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. Fortinet FortiClient 5.2.028 for iOS suffers from a man-in-the-middle attack vulnerability that allows attackers to spoof SSL VPN servers with a crafted certificat...
CVE-2015-1570
The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...
CVE-2015-1569
Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate...
Design/Logic Flaw
The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...
CVE-2015-1570
The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...
CVE-2015-1569
Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate...
CVE-2015-1569
CVE-2015-1569 affects Fortinet FortiClient 5.2.028 for iOS, where certificate validation is not performed, enabling man-in-the-middle attackers to spoof SSL VPN servers with a crafted certificate. This is the explicit impact described in multiple connected sources; further exploitation details or...
CVE-2015-1570
Fortinet FortiClient on Android (5.2.3.091) and iOS (5.2.028) is affected by a certificate validation failure in the Endpoint Control protocol, enabling MITM via a crafted certificate. Root cause: the protocol does not validate certificates. Impact: potential server spoofing with partial integrit...
CVE-2015-1453
The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences...
Hardcoded credentials
The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences...
CVE-2015-1453
CVE-2015-1453 affects Fortinet FortiClient for Android 5.2.3.091, where the qm class uses a hardcoded encryption key (FoRtInEt!AnDrOiD). This enables an attacker to decrypt data stored in Shared Preferences and potentially obtain passwords or other sensitive data. The available sources describe t...
CVE-2015-1453
The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences...
Multiple Vulnerabilities in Fortinet FortiClient
Fortinet FortiClient is a unified standard security software agent for PCs and smartphones. Fortinet FortiClient has multiple security vulnerabilities due to the program failing to properly process user-supplied input. This vulnerability could be exploited by an attacker to bypass certain securit...
Fortinet FortiClient Hardcoded Encryption Keys / Broken SSL Validation
, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Fortinet FortiClient Multiple Vulnerabilities Affected Versions: Verified on FortiClient iOS v5.2.028 and FortiClient Android 5.2.3.091 PDF:...
