CVE-2023-48785

4.8MEDIUM

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS comm

公開日: 3/14/2025更新日: 7/25/2025
NVDで表示MITREで表示

説明

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.

AI分析AIによる分析

影響を受ける製品

fortinetfortinac-f

参照