Skip to content
Sign in
4.4 Medium

CVE-2023-48785 An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote…

Description

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.

Affected products and versions

Product Affected versions Fixed in
FortiNAC-F 7.2 7.2.0 → 7.2.4 No fix stated

Other CVEs of FortiNAC-F

The 3 CVEs of FortiNAC-F →
CVE-2026-21741 An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F… 2.2 Low CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability 9.4 Critical
Track this CVE