FG-IR-26-174: ZTNA Portal Improper Certificate Validation
An improper certificate validation vulnerability [CWE-295] in FortiOS and FortiProxy Agentless ZTNA portal may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the ZTNA portal and the backend destination website.
Affected Software
Event History
Frequently Asked Questions
What systems and traffic are exposed to this issue?
FortiOS and FortiProxy deployments using the Agentless ZTNA portal are affected in the communication channel between that portal and its backend destination website. The issue concerns certificate validation on that backend connection.
What must an attacker be able to do to exploit the vulnerability?
An attacker must be able to act as a man-in-the-middle on the network path between the Agentless ZTNA portal and the backend destination website. No authentication or user interaction is required, but the attack complexity is rated high.
What is the potential impact of a successful attack?
A successful man-in-the-middle attack could compromise the confidentiality, integrity, and availability of communications between the ZTNA portal and the backend website. The provided severity vector rates all three impacts as high.