CVE-2013-4669: Medium severity fortinet forticlient virtual private network vulnerability
FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; FortiClient Lite 2.0 through 2.0.0223 on Android; and FortiClient SSL VPN before 4.0.2258 on Linux proceed with an SSL session after determining that the server's X.509 certificate is invalid, which allows man-in-the-middle attackers to obtain sensitive information by leveraging a password transmission that occurs before the user warning about the certificate problem.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4669?
CVE-2013-4669 is classified as a medium severity vulnerability.
How do I fix CVE-2013-4669?
To mitigate CVE-2013-4669, update FortiClient to version 4.3.5.472 or higher.
What products are affected by CVE-2013-4669?
CVE-2013-4669 affects FortiClient versions before 4.3.5.472 on Windows, Mac OS X, and Android, as well as FortiClient Lite versions before 4.3.4.461.
What type of vulnerability is CVE-2013-4669?
CVE-2013-4669 is a potential Man-In-The-Middle (MITM) vulnerability.
Is there a workaround for CVE-2013-4669?
The recommended workaround for CVE-2013-4669 is to upgrade to the latest version of FortiClient.