Back to search
CVE-2018-9192
Published: Sep 5, 2018
Modified: Oct 25, 2024
PUBLISHED
Description
A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under SSL Deep Inspection feature when CPx being used.
| Vendor | Product | Versions |
|---|---|---|
Fortinet, Inc. | FortiOS | affected 6.0.1, 6.0.0affected 5.4.9, 5.4.8, 5.4.7, 5.4.6 |
References
https://robotattack.org/
x_refsource_MISC
https://fortiguard.com/advisory/FG-IR-17-302
x_refsource_CONFIRM
VU#144389
third-party-advisory
x_refsource_CERT-VN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now