PT-2020-19351 · Fortinet+2 · Openfortivpn+2

Agustingianni · Published 2020-02-27 · Updated 2024-06-15 · CVE-2020-7041

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions openfortivpn version 1.11.0

Description An issue was discovered in openfortivpn when used with OpenSSL 1.0.2 or later, where the tunnel.c file mishandles certificate validation. This occurs because a negative error code from X509 check host is incorrectly interpreted as a successful return value.

Recommendations For openfortivpn version 1.11.0, consider updating to a newer version that correctly handles certificate validation, or as a temporary workaround, restrict the use of OpenSSL to versions prior to 1.0.2 until a patch is available.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2020-7041

OPENSUSE-SU-2020:0301-1

OPENSUSE-SU-2020:0305-1

OPENSUSE-SU-2020_0301-1

OPENSUSE-SU-2024:11118-1

Affected Products

Openssl

Suse

Openfortivpn

References · 26

• https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4 · Patch
• https://github.com/adrienverge/openfortivpn/commit/60660e00b80bad0fadcf39aee86f6f8756c94f91 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2020:0305-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11118-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7041 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-7041 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-7041 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-7041 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7041 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0301-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-7041 · Security Note