| Package | Affected versions | Patched versions |
|---|---|---|
| fortinac-f | ≥ 7.2.0, < 7.2.5 | 7.2.5 |
An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free