NVD

Id
40222  
Name
CVE-2013-4669  
Description
FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; FortiClient Lite 2.0 through 2.0.0223 on Android; and FortiClient SSL VPN before 4.0.2258 on Linux proceed with an SSL session after determining that the server"s X.509 certificate is invalid, which allows man-in-the-middle attackers to obtain sensitive information by leveraging a password transmission that occurs before the user warning about the certificate problem.  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-06-25  
Modified Date
2015-11-04  
Seq
2013-4669  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204617 40222 CVE-2013-4669 20130501 Forticlient VPN client credential interception vulnerability  View
204618 40222 CVE-2013-4669 http://objectif-securite.ch/forticlient_bulletin.php  View
204619 40222 CVE-2013-4669 http://www.fortiguard.com/advisory/Potential-Man-In-The-Middle-Vulnerability-in-FortiClient-VPN/  View
204620 40222 CVE-2013-4669 59604  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21544 JVNDB-2013-003119 複数の OS 上で稼働する FortiClient における重要な情報を取得される脆弱性 複数の OS 上で稼働する FortiClient は、サーバの X.509 証明書が無効であることが特定された後も SSL セッションが継続するため、重要な情報を取得される脆弱性が存在します。 CVE-2013-4669 64611 CVE-2013-4669 40222 5.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003119.html 2013-05-01 2016-02-10 View