description: An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
problem types: Credentials exposure
affected:
{
product: FortiManager
vendor: Fortinet
versions:
status: affected, version: 5.0.6 to 5.2.7
status: affected, version: 5.4.0 to 5.4.1
}