CVE-2023-48785

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.

Score

CVSS 3.1 4.8 Medium

Status

Analyzed - psirt@fortinet.com

Published

2025-03-14

Last modified

2025-03-14

Weaknesses

CWE-295

Affected products

• Fortinac-f (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-23-288