CVE-2012-4948

CVE-2012-4948 describes a default-configuration issue in Fortinet Fortigate UTM appliances: the same Fortigate CA certificate and private key are reused across devices, enabling an attacker with a man-in-the-middle vantage point to spoof SSL servers or sign malware on trusted chains. The CERT/CSA...