{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-21T04:17:51.522","vulnerabilities":[{"cve":{"id":"CVE-2023-50178","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:03.390","lastModified":"2024-11-21T08:36:36.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and various remote servers such as private SDN connectors and FortiToken Cloud."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiADC 7.4.0, 7.2.0 hasta 7.2.3, 7.1 todas las versiones, 7.0 todas las versiones, 6.2 todas las versiones, 6.1 todas las versiones y 6.0 todas las versiones puede permitir un atacante remoto y no autenticado para realizar un ataque Man-in-the-Middle en el canal de comunicación entre el dispositivo y varios servidores remotos, como conectores SDN privados y FortiToken Cloud."}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"F5275C5C-B6FD-4456-B143-ECDD282150C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"57372C1E-C3EE-4B19-8B24-79B9824634A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B81BD40E-F7AF-41E0-A0EB-D12EEC14DFFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C624CB5-F745-4781-839A-B397EC97590B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-298","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}