CVE-2021-22131

First published: Mon Jul 18 2022(Updated: )

A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks.

Credit: psirt@fortinet.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/weakness
• agent/severity
• agent/references
• agent/author
• agent/type
• agent/event
• agent/description
• agent/remedy
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/fortinet
• canonical/fortinet fortitoken mobile
• version/fortinet fortitoken mobile/0.4.10
• version/fortinet fortitoken mobile/0.4.20
• version/fortinet fortitoken mobile/3.0.0
• version/fortinet fortitoken mobile/3.0.1
• version/fortinet fortitoken mobile/3.0.2
• version/fortinet fortitoken mobile/3.0.3
• version/fortinet fortitoken mobile/3.0.4
• version/fortinet fortitoken mobile/3.0.5
• version/fortinet fortitoken mobile/4.0.0
• version/fortinet fortitoken mobile/4.0.1
• version/fortinet fortitoken mobile/4.0.3
• version/fortinet fortitoken mobile/4.1.0
• version/fortinet fortitoken mobile/4.1.1
• version/fortinet fortitoken mobile/4.2.0
• version/fortinet fortitoken mobile/4.2.1
• version/fortinet fortitoken mobile/4.2.2
• version/fortinet fortitoken mobile/4.3.0
• version/fortinet fortitoken mobile/4.4.0
• version/fortinet fortitoken mobile/4.5.0
• version/fortinet fortitoken mobile/5.0.2
• version/fortinet fortitoken mobile/5.0.3
• version/fortinet fortitoken mobile/5.2.0