Man-in-the-Middle Security Flaw in Fortinet FortiClient for Android and iOS
CVE-2015-1570

Currently unrated

Key Information:

Vendor

Fortinet
Status
Forticlient
Vendor
CVE Published:
10 February 2015

What is CVE-2015-1570?

The Fortinet FortiClient for Android and iOS is affected by a vulnerability in its Endpoint Control protocol implementation that fails to properly validate certificates. This deficiency allows attackers to execute man-in-the-middle attacks, potentially facilitating the spoofing of servers with crafted certificates. As a result, sensitive information transmitted between the client and server may be intercepted and compromised.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.security-assessment.com/files/documents/adviso...
x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Jan/124
mailing-listx_refsource_FULLDISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.