Medium severity · published Sep 10, 2024
CVE-2022-45856
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0…
5.9
CVSS
0.2%
EPSS
No
On KEV
Description
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientLinux 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientAndroid 6.4 all versions, 7.0 all versions, 7.2.0 and FortiClientiOS 5.6 all versions, 6.0.0 through 6.0.1, 7.0.0 through 7.0.6 SAML SSO feature may allow an unauthenticated attacker to man-in-the-middle the communication between the FortiClient and both the service provider and the identity provider.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiClientAndroid · Fortinet
7.2.0; 7.0.6 through 7.0.7; 7.0.2 through 7.0.3; 7.0.0; 6.4.6; 6.4.4; +6 more · source: vendor
FO
FortiClientLinux · Fortinet
7.2.0 through 7.2.4; 7.0.0 through 7.0.13; 6.4.7 through 6.4.9; 6.4.0 through 6.4.4 · source: vendor
FO
FortiClientMac · Fortinet
7.2.0 through 7.2.4; 7.0.0 through 7.0.13; 6.4.0 through 6.4.10 · source: vendor
FO
FortiClientWindows · Fortinet
7.0.0 through 7.0.7; 6.4.0 through 6.4.10 · source: vendor
FO
FortiClientiOS · Fortinet
7.0.3 through 7.0.6; 7.0.0 through 7.0.1; 6.0.0 through 6.0.1; 5.6.5 through 5.6.6; 5.6.0 through 5.6.1; 5.4.3 through 5.4.4; +5 more · source: vendor
FO
Forticlient · Fortinet
5.0 before 7.2.1; 6.4 before 7.2.5; 6.4 before 7.2.5; 6.4 before 7.0.8; 2.0 before 7.0.7 · source: NVD