Fortinet FortiSIEM 5.0 / 5.2.1 Improper Certification Validation

Product Name: FortiSIEM Tested versions: 5.0, 5.2.1 Fixed in version: Only a manual workaround is available from Fortinet as of this writing Weakness Type: CWE-295 - Improper Certificate Validation Discovered by: Andrew Klaus Cybera Canada CVE: Pending == Disclosure Timeline: June 25, 2019: Initi...

PT-2018-14084

Name of the Vulnerable Software and Affected Versions Sennheiser HeadSetup version 7.3.4903 Description The issue allows remote attackers to spoof arbitrary web sites or software publishers by utilizing Certification Authority CA certificates placed in the Trusted Root CA store of the local syste...