An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fortisase | Fortinet | 25.1.39 (including) | 25.1.39 (including) |
| Fortios | Fortinet | 7.4.0 (including) | 7.4.8 (excluding) |
| Fortios | Fortinet | 7.6.0 (including) | 7.6.2 (excluding) |