CVE-2021-22131
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks.
Una comprobación incorrecta del certificado con desajuste de host en Fortinet FortiTokenAndroid versión 5.0.3 y posteriores, Fortinet FortiTokeniOS versión 5.2.0 y posteriores, Fortinet FortiTokenWinApp versión 4.0.3 y posteriores permite a un atacante recuperar información divulgada por medio de ataques de tipo man-in-the-middle
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-04 CVE Reserved
- 2022-07-18 CVE Published
- 2024-02-08 EPSS Updated
- 2024-10-22 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-295: Improper Certificate Validation
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://fortiguard.com/advisory/FG-IR-21-024 | 2022-07-25 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 0.4.10 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "0.4.10" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 0.4.20 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "0.4.20" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.0" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.0" | windows |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.1 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.1" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.1 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.1" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.1 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.1" | windows |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.2 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.2" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.2 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.2" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.3 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.3" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.3 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.3" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.4 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.4" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.4 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.4" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 3.0.5 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "3.0.5" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.0.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.0.0" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.0.1 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.0.1" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.0.3 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.0.3" | windows |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.1.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.1.0" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.1.1 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.1.1" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.1.1 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.1.1" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.2.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.2.0" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.2.1 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.2.1" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.2.2 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.2.2" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.3.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.3.0" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.3.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.3.0" | ios |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.4.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.4.0" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 4.5.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "4.5.0" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 5.0.2 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "5.0.2" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 5.0.3 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "5.0.3" | android |
Affected
| ||||||
| Fortinet Search vendor "Fortinet" | Fortitoken Mobile Search vendor "Fortinet" for product "Fortitoken Mobile" | 5.2.0 Search vendor "Fortinet" for product "Fortitoken Mobile" and version "5.2.0" | ios |
Affected
| ||||||