No certificate name verification for fgfm connection
Fortinet PSIRT Advisories
Fortinet PSIRT Contact:
Website: https://fortiguard.fortinet.com/faq/psirt-contact
FG-IR-24-046
Final
1
1
2025-04-08T00:00:00
Current version
2025-04-08T00:00:00
2025-04-22T00:00:00
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiVoice and FortiWeb may allow an unauthenticated attacker in a man-in-the-middle position to impersonate the management device (FortiCloud server or/and in certain conditions, FortiManager), via intercepting the FGFM authentication request between the management device and the managed device
None
Improper access control
None
Internally discovered and reported by Théo Leleu of Fortinet Product Security team and Stephen Bevan of Fortinet Development team.
FortiAnalyzer 7.4.2
FortiAnalyzer 7.4.1
FortiAnalyzer 7.4.0
FortiAnalyzer 7.2.4
FortiAnalyzer 7.2.3
FortiAnalyzer 7.2.2
FortiAnalyzer 7.2.1
FortiAnalyzer 7.2.0
FortiAnalyzer 7.0.11
FortiAnalyzer 7.0.10
FortiAnalyzer 7.0.9
FortiAnalyzer 7.0.8
FortiAnalyzer 7.0.7
FortiAnalyzer 7.0.6
FortiAnalyzer 7.0.5
FortiAnalyzer 7.0.4
FortiAnalyzer 7.0.3
FortiAnalyzer 7.0.2
FortiAnalyzer 7.0.1
FortiAnalyzer 7.0.0
FortiAnalyzer 6.4.14
FortiAnalyzer 6.4.13
FortiAnalyzer 6.4.12
FortiAnalyzer 6.4.11
FortiAnalyzer 6.4.10
FortiAnalyzer 6.4.9
FortiAnalyzer 6.4.8
FortiAnalyzer 6.4.7
FortiAnalyzer 6.4.6
FortiAnalyzer 6.4.5
FortiAnalyzer 6.4.4
FortiAnalyzer 6.4.3
FortiAnalyzer 6.4.2
FortiAnalyzer 6.4.1
FortiAnalyzer 6.4.0
FortiAnalyzer 6.2.13
FortiAnalyzer 6.2.12
FortiAnalyzer 6.2.11
FortiAnalyzer 6.2.10
FortiAnalyzer 6.2.9
FortiAnalyzer 6.2.8
FortiAnalyzer 6.2.7
FortiAnalyzer 6.2.6
FortiAnalyzer 6.2.5
FortiAnalyzer 6.2.4
FortiAnalyzer 6.2.3
FortiAnalyzer 6.2.2
FortiAnalyzer 6.2.1
FortiAnalyzer 6.2.0
FortiManager 7.4.2
FortiManager 7.4.1
FortiManager 7.4.0
FortiManager 7.2.4
FortiManager 7.2.3
FortiManager 7.2.2
FortiManager 7.2.1
FortiManager 7.2.0
FortiManager 7.0.11
FortiManager 7.0.10
FortiManager 7.0.9
FortiManager 7.0.8
FortiManager 7.0.7
FortiManager 7.0.6
FortiManager 7.0.5
FortiManager 7.0.4
FortiManager 7.0.3
FortiManager 7.0.2
FortiManager 7.0.1
FortiManager 7.0.0
FortiManager 6.4.14
FortiManager 6.4.13
FortiManager 6.4.12
FortiManager 6.4.11
FortiManager 6.4.10
FortiManager 6.4.9
FortiManager 6.4.8
FortiManager 6.4.7
FortiManager 6.4.6
FortiManager 6.4.5
FortiManager 6.4.4
FortiManager 6.4.3
FortiManager 6.4.2
FortiManager 6.4.1
FortiManager 6.4.0
FortiManager 6.2.13
FortiManager 6.2.12
FortiManager 6.2.11
FortiManager 6.2.10
FortiManager 6.2.9
FortiManager 6.2.8
FortiManager 6.2.7
FortiManager 6.2.6
FortiManager 6.2.5
FortiManager 6.2.4
FortiManager 6.2.3
FortiManager 6.2.2
FortiManager 6.2.1
FortiManager 6.2.0
FortiOS 7.4.4
FortiOS 7.4.3
FortiOS 7.4.2
FortiOS 7.4.1
FortiOS 7.4.0
FortiOS 7.2.8
FortiOS 7.2.7
FortiOS 7.2.6
FortiOS 7.2.5
FortiOS 7.2.4
FortiOS 7.2.3
FortiOS 7.2.2
FortiOS 7.2.1
FortiOS 7.2.0
FortiOS 7.0.15
FortiOS 7.0.14
FortiOS 7.0.13
FortiOS 7.0.12
FortiOS 7.0.11
FortiOS 7.0.10
FortiOS 7.0.9
FortiOS 7.0.8
FortiOS 7.0.7
FortiOS 7.0.6
FortiOS 7.0.5
FortiOS 7.0.4
FortiOS 7.0.3
FortiOS 7.0.2
FortiOS 7.0.1
FortiOS 7.0.0
FortiOS 6.4.16
FortiOS 6.4.15
FortiOS 6.4.14
FortiOS 6.4.13
FortiOS 6.4.12
FortiOS 6.4.11
FortiOS 6.4.10
FortiOS 6.4.9
FortiOS 6.4.8
FortiOS 6.4.7
FortiOS 6.4.6
FortiOS 6.4.5
FortiOS 6.4.4
FortiOS 6.4.3
FortiOS 6.4.2
FortiOS 6.4.1
FortiOS 6.4.0
FortiProxy 7.4.2
FortiProxy 7.4.1
FortiProxy 7.4.0
FortiProxy 7.2.9
FortiProxy 7.2.8
FortiProxy 7.2.7
FortiProxy 7.2.6
FortiProxy 7.2.5
FortiProxy 7.2.4
FortiProxy 7.2.3
FortiProxy 7.2.2
FortiProxy 7.2.1
FortiProxy 7.2.0
FortiProxy 7.0.15
FortiProxy 7.0.14
FortiProxy 7.0.13
FortiProxy 7.0.12
FortiProxy 7.0.11
FortiProxy 7.0.10
FortiProxy 7.0.9
FortiProxy 7.0.8
FortiProxy 7.0.7
FortiProxy 7.0.6
FortiProxy 7.0.5
FortiProxy 7.0.4
FortiProxy 7.0.3
FortiProxy 7.0.2
FortiProxy 7.0.1
FortiProxy 7.0.0
FortiProxy 2.0.14
FortiProxy 2.0.13
FortiProxy 2.0.12
FortiProxy 2.0.11
FortiProxy 2.0.10
FortiProxy 2.0.9
FortiProxy 2.0.8
FortiProxy 2.0.7
FortiProxy 2.0.6
FortiProxy 2.0.5
FortiProxy 2.0.4
FortiProxy 2.0.3
FortiProxy 2.0.2
FortiProxy 2.0.1
FortiProxy 2.0.0
FortiVoice 7.0.2
FortiVoice 7.0.1
FortiVoice 7.0.0
FortiVoice 6.4.8
FortiVoice 6.4.7
FortiVoice 6.4.6
FortiVoice 6.4.5
FortiVoice 6.4.4
FortiVoice 6.4.3
FortiVoice 6.4.2
FortiVoice 6.4.1
FortiVoice 6.4.0
FortiVoice 6.0.12
FortiVoice 6.0.11
FortiVoice 6.0.10
FortiVoice 6.0.9
FortiVoice 6.0.8
FortiVoice 6.0.7
FortiVoice 6.0.6
FortiVoice 6.0.5
FortiVoice 6.0.4
FortiVoice 6.0.3
FortiVoice 6.0.2
FortiVoice 6.0.1
FortiVoice 6.0.0
FortiWeb 7.4.2
FortiWeb 7.4.1
FortiWeb 7.4.0
No certificate name verification for fgfm connection
CVE-2024-26013
CVE-2024-50565
FortiAnalyzer-7.4.2
FortiAnalyzer-7.4.1
FortiAnalyzer-7.4.0
FortiAnalyzer-7.2.4
FortiAnalyzer-7.2.3
FortiAnalyzer-7.2.2
FortiAnalyzer-7.2.1
FortiAnalyzer-7.2.0
FortiAnalyzer-7.0.11
FortiAnalyzer-7.0.10
FortiAnalyzer-7.0.9
FortiAnalyzer-7.0.8
FortiAnalyzer-7.0.7
FortiAnalyzer-7.0.6
FortiAnalyzer-7.0.5
FortiAnalyzer-7.0.4
FortiAnalyzer-7.0.3
FortiAnalyzer-7.0.2
FortiAnalyzer-7.0.1
FortiAnalyzer-7.0.0
FortiAnalyzer-6.4.14
FortiAnalyzer-6.4.13
FortiAnalyzer-6.4.12
FortiAnalyzer-6.4.11
FortiAnalyzer-6.4.10
FortiAnalyzer-6.4.9
FortiAnalyzer-6.4.8
FortiAnalyzer-6.4.7
FortiAnalyzer-6.4.6
FortiAnalyzer-6.4.5
FortiAnalyzer-6.4.4
FortiAnalyzer-6.4.3
FortiAnalyzer-6.4.2
FortiAnalyzer-6.4.1
FortiAnalyzer-6.4.0
FortiAnalyzer-6.2.13
FortiAnalyzer-6.2.12
FortiAnalyzer-6.2.11
FortiAnalyzer-6.2.10
FortiAnalyzer-6.2.9
FortiAnalyzer-6.2.8
FortiAnalyzer-6.2.7
FortiAnalyzer-6.2.6
FortiAnalyzer-6.2.5
FortiAnalyzer-6.2.4
FortiAnalyzer-6.2.3
FortiAnalyzer-6.2.2
FortiAnalyzer-6.2.1
FortiAnalyzer-6.2.0
FortiManager-7.4.2
FortiManager-7.4.1
FortiManager-7.4.0
FortiManager-7.2.4
FortiManager-7.2.3
FortiManager-7.2.2
FortiManager-7.2.1
FortiManager-7.2.0
FortiManager-7.0.11
FortiManager-7.0.10
FortiManager-7.0.9
FortiManager-7.0.8
FortiManager-7.0.7
FortiManager-7.0.6
FortiManager-7.0.5
FortiManager-7.0.4
FortiManager-7.0.3
FortiManager-7.0.2
FortiManager-7.0.1
FortiManager-7.0.0
FortiManager-6.4.14
FortiManager-6.4.13
FortiManager-6.4.12
FortiManager-6.4.11
FortiManager-6.4.10
FortiManager-6.4.9
FortiManager-6.4.8
FortiManager-6.4.7
FortiManager-6.4.6
FortiManager-6.4.5
FortiManager-6.4.4
FortiManager-6.4.3
FortiManager-6.4.2
FortiManager-6.4.1
FortiManager-6.4.0
FortiManager-6.2.13
FortiManager-6.2.12
FortiManager-6.2.11
FortiManager-6.2.10
FortiManager-6.2.9
FortiManager-6.2.8
FortiManager-6.2.7
FortiManager-6.2.6
FortiManager-6.2.5
FortiManager-6.2.4
FortiManager-6.2.3
FortiManager-6.2.2
FortiManager-6.2.1
FortiManager-6.2.0
FortiOS-7.4.4
FortiOS-7.4.3
FortiOS-7.4.2
FortiOS-7.4.1
FortiOS-7.4.0
FortiOS-7.2.8
FortiOS-7.2.7
FortiOS-7.2.6
FortiOS-7.2.5
FortiOS-7.2.4
FortiOS-7.2.3
FortiOS-7.2.2
FortiOS-7.2.1
FortiOS-7.2.0
FortiOS-7.0.15
FortiOS-7.0.14
FortiOS-7.0.13
FortiOS-7.0.12
FortiOS-7.0.11
FortiOS-7.0.10
FortiOS-7.0.9
FortiOS-7.0.8
FortiOS-7.0.7
FortiOS-7.0.6
FortiOS-7.0.5
FortiOS-7.0.4
FortiOS-7.0.3
FortiOS-7.0.2
FortiOS-7.0.1
FortiOS-7.0.0
FortiOS-6.4.16
FortiOS-6.4.15
FortiOS-6.4.14
FortiOS-6.4.13
FortiOS-6.4.12
FortiOS-6.4.11
FortiOS-6.4.10
FortiOS-6.4.9
FortiOS-6.4.8
FortiOS-6.4.7
FortiOS-6.4.6
FortiOS-6.4.5
FortiOS-6.4.4
FortiOS-6.4.3
FortiOS-6.4.2
FortiOS-6.4.1
FortiOS-6.4.0
FortiProxy-7.4.2
FortiProxy-7.4.1
FortiProxy-7.4.0
FortiProxy-7.2.9
FortiProxy-7.2.8
FortiProxy-7.2.7
FortiProxy-7.2.6
FortiProxy-7.2.5
FortiProxy-7.2.4
FortiProxy-7.2.3
FortiProxy-7.2.2
FortiProxy-7.2.1
FortiProxy-7.2.0
FortiProxy-7.0.15
FortiProxy-7.0.14
FortiProxy-7.0.13
FortiProxy-7.0.12
FortiProxy-7.0.11
FortiProxy-7.0.10
FortiProxy-7.0.9
FortiProxy-7.0.8
FortiProxy-7.0.7
FortiProxy-7.0.6
FortiProxy-7.0.5
FortiProxy-7.0.4
FortiProxy-7.0.3
FortiProxy-7.0.2
FortiProxy-7.0.1
FortiProxy-7.0.0
FortiProxy-2.0.14
FortiProxy-2.0.13
FortiProxy-2.0.12
FortiProxy-2.0.11
FortiProxy-2.0.10
FortiProxy-2.0.9
FortiProxy-2.0.8
FortiProxy-2.0.7
FortiProxy-2.0.6
FortiProxy-2.0.5
FortiProxy-2.0.4
FortiProxy-2.0.3
FortiProxy-2.0.2
FortiProxy-2.0.1
FortiProxy-2.0.0
FortiVoice-7.0.2
FortiVoice-7.0.1
FortiVoice-7.0.0
FortiVoice-6.4.8
FortiVoice-6.4.7
FortiVoice-6.4.6
FortiVoice-6.4.5
FortiVoice-6.4.4
FortiVoice-6.4.3
FortiVoice-6.4.2
FortiVoice-6.4.1
FortiVoice-6.4.0
FortiVoice-6.0.12
FortiVoice-6.0.11
FortiVoice-6.0.10
FortiVoice-6.0.9
FortiVoice-6.0.8
FortiVoice-6.0.7
FortiVoice-6.0.6
FortiVoice-6.0.5
FortiVoice-6.0.4
FortiVoice-6.0.3
FortiVoice-6.0.2
FortiVoice-6.0.1
FortiVoice-6.0.0
FortiWeb-7.4.2
FortiWeb-7.4.1
FortiWeb-7.4.0
7.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
https://fortiguard.fortinet.com/psirt/FG-IR-24-046
No certificate name verification for fgfm connection
Reference>