> Lack of TLS Certificate Validation during initial SSO Authentication
[DATE: 10/03/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
6.3
An improper certificate validation [CWE-295] vulnerability in the FortiManager GUI may allow a remote unauthenticated attacker to view confidential information via a man in the middle [MiTM] attack.
Revised on 2026-03-10 00:00:00