PT-2015-5359 · Fortinet · Forticlient

Denis Andzakovic · Publicado 2015-02-10 · Atualizado 2015-02-11 · CVE-2015-1570

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FortiClient versions 5.2.3.091 for Android and 5.2.028 for iOS

Description The issue is related to the Endpoint Control protocol implementation, which does not validate certificates. This makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.

Recommendations For FortiClient version 5.2.3.091 on Android, consider disabling the Endpoint Control protocol until a patch is available. For FortiClient version 5.2.028 on iOS, consider disabling the Endpoint Control protocol until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2015-1570

Produtos afetados

Forticlient

Referências · 3

• 🔥 http://security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Jan/124 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1570 · Nota de Segurança