Lack of certificate verification when establishing secure connections

Summary

An improper certificate validation vulnerability [CWE-295] in FortiOS and FortiProxy may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the vulnerable device and the remote FortiGuard's map server.

Affected Products

FortiProxy version 7.2.0 through 7.2.3
FortiProxy version 7.0.0 through 7.0.9
FortiProxy 2.0 all versions
FortiProxy 1.2 all versions
FortiProxy 1.1 all versions are not affected
FortiOS 7.4 all versions are not affected
FortiOS version 7.2.0
FortiOS version 7.0.0 through 7.0.10
FortiOS 6.4 all versions
FortiOS 6.2 all versions
FortiOS 6.0 all versions

Solutions

Please upgrade to FortiOS version 7.2.1 or above
Please upgrade to FortiOS version 7.0.11 or above

Please upgrade to FortiProxy version 7.2.4 or above
Please upgrade to FortiProxy version 7.0.10 or above

Acknowledgement

Internally discovered and reported by Wilfried Djettchou of Fortinet Product Security team.

Timeline

2023-06-12: Initial publication