| Package | Affected versions | Patched versions |
|---|---|---|
| fortiportal | = 7.4.0≥ 6.0.0, < 7.0.9≥ 7.2.0, < 7.2.5 | 7.0.97.2.5 |
An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and below when connecting to a FortiManager device, a FortiAnalyzer device, or an SMTP server may allow an unauthenticated attacker in a Man-in-the-Middle position to intercept on and tamper with the encrypted communication channel established between the FortiPortal and those endpoints.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free