CVE-2015-1569
fortinet forticlient: no CVSS score yet. EPSS 0.5% chance of exploitation in the next 30 days.
Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate.
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
- CWE
- CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fortinet:forticlient
References
- http://seclists.org/fulldisclosure/2015/Jan/124
- http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf
- http://seclists.org/fulldisclosure/2015/Jan/124
- http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf