Man-in-the-Middle Vulnerability in FortiClient Products by Fortinet
CVE-2013-4669

Currently unrated

Key Information:

Vendor

Fortinet
Status
Forticlient
Vendor
CVE Published:
25 June 2013

What is CVE-2013-4669?

Certain versions of FortiClient are susceptible to a man-in-the-middle vulnerability that occurs when the software fails to validate a server's X.509 certificate correctly. This oversight enables attackers to exploit the session for capturing sensitive information, including user credentials, before any warnings about the certificate issue are presented to the user. The risk primarily arises during SSL transactions, where an attacker positioned between the client and server can intercept data without proper alerts being triggered in the client software.

References

http://www.fortiguard.com/advisory/Potential-Man-In-The-M...
x_refsource_CONFIRM
http://objectif-securite.ch/forticlient_bulletin.php
x_refsource_MISC
http://www.securityfocus.com/bid/59604
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.