CVE-2021-41019

An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious…

Low · published November 2, 2021

CVSS v3.1
3.5
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00569 · 46.4th percentile
Published
2021-11-02T17:41Z
EPSS history
Timeline
  • 02 NOV 17:41Z
    An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious…
    cvelistv5