CVE:CVE-2012-4948
CNNVD:CNNVD-201211-077
Fortinet FortiGate是美国飞塔（Fortinet）公司开发的一套网络安全平台。该平台提供防火墙、防病毒和入侵防御（IPS）、应用控制、反垃圾邮件、无线控制器和广域网加速等功能。
Fortinet Fortigate UTM应用的默认配置中存在漏洞，该漏洞源于使用相同的Certification Authority证书和跨不同用户安装相同的私钥。中间人攻击者利用在受信任的根证书颁发机构列表中存在的Fortinet_CA_SSLProxy证书，欺骗SSL服务器。
solution:Upgrade fortinet fortigate-1000c to a higher version than -; Upgrade fortinet fortigate-100d to a higher version than -; Upgrade fortinet fortigate-110c to a higher version than -; Upgrade fortinet fortigate-1240b to a higher version than -; Upgrade fortinet fortigate-200b to a higher version than -; Upgrade fortinet fortigate-20c to a higher version than -; Upgrade fortinet fortigate-300c to a higher version than -; Upgrade fortinet fortigate-3040b to a higher version than -; Upgrade fortinet fortigate-310b to a higher version than -; Upgrade fortinet fortigate-311b to a higher version than -; Upgrade fortinet fortigate-3140b to a higher version than -; Upgrade fortinet fortigate-3240c to a higher version than -; Upgrade fortinet fortigate-3810a to a higher version than -; Upgrade fortinet fortigate-3950b to a higher version than -; Upgrade fortinet fortigate-40c to a higher version than -; Upgrade fortinet fortigate-5001a-sw to a higher version than -; Upgrade fortinet fortigate-5001b to a higher version than -; Upgrade fortinet fortigate-5020 to a higher version than -; Upgrade fortinet fortigate-5060 to a higher version than -; Upgrade fortinet fortigate-50b to a higher version than -; Upgrade fortinet fortigate-5101c to a higher version than -; Upgrade fortinet fortigate-5140b to a higher version than -; Upgrade fortinet fortigate-600c to a higher version than -; Upgrade fortinet fortigate-60c to a higher version than -; Upgrade fortinet fortigate-620b to a higher version than -; Upgrade fortinet fortigate-800c to a higher version than -; Upgrade fortinet fortigate-80c to a higher version than -; Upgrade fortinet fortigate-voice-80c to a higher version than -; Upgrade fortinet fortigaterugged-100c to a higher version than -