PT-2015-5359 · Fortinet · Forticlient

Denis Andzakovic · Published 2015-02-10 · Updated 2015-02-11 · CVE-2015-1570

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FortiClient versions 5.2.3.091 for Android and 5.2.028 for iOS

Description The issue is related to the Endpoint Control protocol implementation, which does not validate certificates. This makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.

Recommendations For FortiClient version 5.2.3.091 on Android, consider disabling the Endpoint Control protocol until a patch is available. For FortiClient version 5.2.028 on iOS, consider disabling the Endpoint Control protocol until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2015-1570

Affected Products

Forticlient

References · 3

• 🔥 http://security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Jan/124 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1570 · Security Note