Vulnerability in Fortinet Fortigate-1000c

CVE-2012-4948

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.

Vulnerability class: Improper Certificate Validation

EPSS: 0.003 (26.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cret@cert.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cret@cert.org (x_refsource_OSVDB, vdb-entry)