Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-24012 EUVD-2021-10932GHSA-2fg7-gvqp-mhcc

An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connec…

Published Jun 2, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiOS Category: Network devices

Description

An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted Certificate Authority.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiOS FortiOS 6.4.0 to 6.4.4 —

References