Improper certificate validation in Fortinet, Inc products - CVE-2022-45856
Published: September 10, 2024
Vulnerability identifier: #VU97116
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-45856
CWE-ID: CWE-295
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform MitM attack.
The vulnerability exists due to improper validation of client-side certificates in SAML SSO feature. A remote attacker can perform MitM attack between the FortiClient and both the service provider and the identity provider.
Affected software
FortiClient (iOS)
FortiClient (Android)
FortiClient (Linux)
FortiClient (macOS)
Fortinet FortiClient for Windows
FortiClient (Android)
FortiClient (Linux)
FortiClient (macOS)
Fortinet FortiClient for Windows
How to mitigate CVE-2022-45856
Install updates from vendor's website.
FortiClient (iOS) - update to 7.0.7
FortiClient (Android) - update to 7.2.1
FortiClient (Linux) - update to 7.2.5
Fortinet FortiClient for Windows - update to 7.0.8
FortiClient (macOS) - update to 7.2.5
FortiClient (Android) - update to 7.2.1
FortiClient (Linux) - update to 7.2.5
Fortinet FortiClient for Windows - update to 7.0.8
FortiClient (macOS) - update to 7.2.5