Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2022-45856

An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 thr

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientLinux 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientAndroid 6.4 all versions, 7.0 all versions, 7.2.0 and FortiClientiOS 5.6 all versions, 6.0.0 through 6.0.1, 7.0.0 through 7.0.6 SAML SSO feature may allow an unauthenticated attacker to man-in-the-middle the communication between the FortiClient and  both the service provider and the identity provider.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiClientiOS

Default version status: unaffected

  • 7.0.3 to ≤ 7.0.6affected
  • 7.0.0 to ≤ 7.0.1affected
  • 6.0.0 to ≤ 6.0.1affected
  • 5.6.5 to ≤ 5.6.6affected
  • 5.6.0 to ≤ 5.6.1affected
  • 5.4.3 to ≤ 5.4.4affected
  • 5.4.0 to ≤ 5.4.1affected
  • 5.2.0 to ≤ 5.2.3affected
  • 5.0.0 to ≤ 5.0.3affected
  • 4.0.0 to ≤ 4.0.2affected
  • 2.0.0 to ≤ 2.0.1affected

Fortinet FortiClientAndroid

Default version status: unaffected

  • 7.2.0affected
  • 7.0.6 to ≤ 7.0.7affected
  • 7.0.2 to ≤ 7.0.3affected
  • 7.0.0affected
  • 6.4.6affected
  • 6.4.4affected
  • 6.4.1affected
  • 6.0.0affected
  • 5.6.0affected
  • 5.4.0 to ≤ 5.4.2affected
  • 5.2.0 to ≤ 5.2.8affected
  • 5.0.0 to ≤ 5.0.3affected

Fortinet FortiClientMac

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.4affected
  • 7.0.0 to ≤ 7.0.13affected
  • 6.4.0 to ≤ 6.4.10affected

Fortinet FortiClientLinux

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.4affected
  • 7.0.0 to ≤ 7.0.13affected
  • 6.4.7 to ≤ 6.4.9affected
  • 6.4.0 to ≤ 6.4.4affected

Fortinet FortiClientWindows

Default version status: unaffected

  • 7.0.0 to ≤ 7.0.7affected
  • 6.4.0 to ≤ 6.4.10affected

References