Input validation

A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks...

CVE-2021-22131

A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks...

CVE-2021-22131

CVE-2021-22131 affects Fortinet FortiToken Mobile: Android up to 5.0.3, iOS up to 5.2.0, Windows FortiTokenWinApp up to 4.0.3. Root cause is improper TLS certificate validation with host mismatch, enabling a MITM to disclose information. Public details from NVD and Red Hat/NCSC context this as a ...