The SSL-VPN feature in Fortinet FortiOS prior to 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote malicious users to spoof encrypted content via a crafted MAC field.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fortinet fortios |