A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-365 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Jul 2025, 15:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-365 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Fortinet
Fortinet forticlient |
|
| CPE | cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:windows:*:* |
10 Jun 2025, 17:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-10 17:19
Updated : 2025-07-25 15:26
NVD link : CVE-2024-54019
Mitre link : CVE-2024-54019
JSON object : View
Products Affected
fortinet
- forticlient
CWE
CWE-297
Improper Validation of Certificate with Host Mismatch