Description
An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and below when connecting to a FortiManager device, a FortiAnalyzer device, or an SMTP server may allow an unauthenticated attacker in a Man-in-the-Middle position to intercept on and tamper with the encrypted communication channel established between the FortiPortal and those endpoints.
INFO
Published Date :
2025-03-14T15:02:47.500Z
Last Modified :
2025-03-14T18:02:38.328Z
Source :
fortinet
AFFECTED PRODUCTS
The following products are affected by CVE-2024-40590 vulnerability.
| Vendors | Products |
|---|---|
| Fortinet |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-40590.
| URL | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-22-155 |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact