60
CVE-2020-7041
—CVSS 3.1
5.3 medium
EPSS
2%p76
Published
()
Modified
Description
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.
- Vendors
- openfortivpn projectfedoraprojectopensuse
- Products
- openfortivpn, fedora, backports sle, leap
- Weakness
- CWE-295
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N