N/A

FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; FortiClient Lite 2.0 through 2.0.0223 on Android; and FortiClient SSL VPN before 4.0.2258 on Linux proceed with an SSL session after determining that the server's X.509 certificate is invalid, which allows man-in-the-middle attackers to obtain sensitive information by leveraging a password transmission that occurs before the user warning about the certificate problem.

N/A

N/A

Fortinet FortiClient VPN客户端SSL证书验证安全绕过漏洞

Fortinet FortiClient、FortiClient Lite和FortiClient SSL VPN都是美国飞塔（Fortinet）公司的产品。FortiClient是一套为终端提供安全的软件解决方案，它提供IPsec和SSL 加密、广域网优化、终端合规和双因子认证等功能。FortiClient Lite是一款免费的反病毒软件，该软件提供恶意软件检测、实时防护、家长控制、网页过滤等功能。FortiClient SSL VPN是FortiClient产品中的集成软件，主要提供虚拟专用网技术。

N/A

N/A