CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
EPSS
Percentile
17.1%
A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks.
Vendor | Product | Version | CPE |
---|---|---|---|
fortinet | fortitoken_mobile | 0.4.10 | cpe:2.3:a:fortinet:fortitoken_mobile:0.4.10:*:*:*:*:android:*:* |
fortinet | fortitoken_mobile | 0.4.20 | cpe:2.3:a:fortinet:fortitoken_mobile:0.4.20:*:*:*:*:android:*:* |
fortinet | fortitoken_mobile | 3.0.0 | cpe:2.3:a:fortinet:fortitoken_mobile:3.0.0:*:*:*:*:android:*:* |
fortinet | fortitoken_mobile | 3.0.0 | cpe:2.3:a:fortinet:fortitoken_mobile:3.0.0:*:*:*:*:windows:*:* |
fortinet | fortitoken_mobile | 3.0.1 | cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:android:*:* |
fortinet | fortitoken_mobile | 3.0.1 | cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:ios:*:* |
fortinet | fortitoken_mobile | 3.0.1 | cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:windows:*:* |
fortinet | fortitoken_mobile | 3.0.2 | cpe:2.3:a:fortinet:fortitoken_mobile:3.0.2:*:*:*:*:android:*:* |
fortinet | fortitoken_mobile | 3.0.2 | cpe:2.3:a:fortinet:fortitoken_mobile:3.0.2:*:*:*:*:ios:*:* |
fortinet | fortitoken_mobile | 3.0.3 | cpe:2.3:a:fortinet:fortitoken_mobile:3.0.3:*:*:*:*:android:*:* |