An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientLinux 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientAndroid 6.4 all versions, 7.0 all versions, 7.2.0 and FortiClientiOS 5.6 all versions, 6.0.0 through 6.0.1, 7.0.0 through 7.0.6 SAML SSO feature may allow an unauthenticated attacker to man-in-the-middle the communication between the FortiClient and both the service provider and the identity provider.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiClientiOS
Vendor
Fortinet
Product
FortiClientiOS
Platforms
Unknown
Default status
unaffected
FortiClientiOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.0.3
affected
semver
Unavailable
7.0.6
None listed
7.0.0
affected
semver
Unavailable
7.0.1
None listed
6.0.0
affected
semver
Unavailable
6.0.1
None listed
5.6.5
affected
semver
Unavailable
5.6.6
None listed
5.6.0
affected
semver
Unavailable
5.6.1
None listed
5.4.3
affected
semver
Unavailable
5.4.4
None listed
5.4.0
affected
semver
Unavailable
5.4.1
None listed
5.2.0
affected
semver
Unavailable
5.2.3
None listed
5.0.0
affected
semver
Unavailable
5.0.3
None listed
4.0.0
affected
semver
Unavailable
4.0.2
None listed
2.0.0
affected
semver
Unavailable
2.0.1
None listed
FortiClientAndroid
Vendor
Fortinet
Product
FortiClientAndroid
Platforms
Unknown
Default status
unaffected
FortiClientAndroid · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.2.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.0.6
affected
semver
Unavailable
7.0.7
None listed
7.0.2
affected
semver
Unavailable
7.0.3
None listed
7.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
6.4.6
affected
Unavailable
Unavailable
Unavailable
None listed
6.4.4
affected
Unavailable
Unavailable
Unavailable
None listed
6.4.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.0.0
affected
Unavailable
Unavailable
Unavailable
None listed
5.6.0
affected
Unavailable
Unavailable
Unavailable
None listed
5.4.0
affected
semver
Unavailable
5.4.2
None listed
5.2.0
affected
semver
Unavailable
5.2.8
None listed
5.0.0
affected
semver
Unavailable
5.0.3
None listed
FortiClientMac
Vendor
Fortinet
Product
FortiClientMac
Platforms
Unknown
Default status
unaffected
FortiClientMac · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.2.0
affected
semver
Unavailable
7.2.4
None listed
7.0.0
affected
semver
Unavailable
7.0.13
None listed
6.4.0
affected
semver
Unavailable
6.4.10
None listed
FortiClientLinux
Vendor
Fortinet
Product
FortiClientLinux
Platforms
Unknown
Default status
unaffected
FortiClientLinux · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.2.0
affected
semver
Unavailable
7.2.4
None listed
7.0.0
affected
semver
Unavailable
7.0.13
None listed
6.4.7
affected
semver
Unavailable
6.4.9
None listed
6.4.0
affected
semver
Unavailable
6.4.4
None listed
FortiClientWindows
Vendor
Fortinet
Product
FortiClientWindows
Platforms
Unknown
Default status
unaffected
FortiClientWindows · Scoped product and version facts