CVE-2016-8495
HighSummary
CVE-2016-8495 describes an improper certificate validation vulnerability in Fortinet FortiManager versions 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1. This allows a remote attacker to spoof a trusted entity using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
Risk Assessment
Organizations may be exposed to MITM attacks, potentially leading to data interception or manipulation of communications with trusted entities. This could result in serious security and integrity issues for systems.
Recommendation
It is recommended to update FortiManager to the latest version to mitigate this vulnerability. Additionally, implementing extra security measures such as network traffic monitoring and certificate verification is advisable.
Other vulnerabilities in Fortinet FortiManager
See all- CVE-2015-3617High
Fortinet FortiManager versions 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.
- CVE-2015-3614High
Fortinet FortiManager versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2 allow remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.
- CVE-2024-48884High
A path traversal vulnerability in Fortinet FortiManager, FortiOS, and FortiProxy allows a remote authenticated attacker with access to the Security Fabric interface to write arbitrary files, or an unauthenticated attacker to delete an arbitrary folder.
- CVE-2015-3616Critical
CVE-2015-3616 is an SQL injection vulnerability in Fortinet FortiManager versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2, allowing remote attackers to execute arbitrary commands via unspecified parameters.
Original NVD description (English source)
An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.