CVE-2021-24012

An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted Certificate Authority.
References
Link Resource
https://fortiguard.com/advisory/FG-IR-21-018 Vendor Advisory
Configurations

Configuration 1

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Information

Published : 2021-06-02 01:15

Updated : 2021-06-14 02:56


NVD link : CVE-2021-24012

Mitre link : CVE-2021-24012

Products Affected
No products.
CWE
CWE-295

Improper Certificate Validation