Security Advisory

CVE-2021-41019

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-02 17:41:08

Last updated 2024-10-25 13:48:22

Assigner fortinet

State PUBLISHED

Description

An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials.

← Browse all CVEs View on cve.org ↗