Security Advisory

CVE-2020-7041

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-02-27 17:29:38
Last updated 2024-08-04 09:18:02
Assigner mitre
State PUBLISHED

Description

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.