Beveiligingsadvies

CVE-2021-41019

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-11-02 17:41:08
Laatst bijgewerkt 2024-10-25 13:48:22
Toegewezen door fortinet
CVSS-score 3.5
Status PUBLISHED

Beschrijving

An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials.