CVE-2020-7041
- State
- Published
- Severity
- Not scored
- Published
- Feb 27, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 14, 2020
Description
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/adrienverge/openfortivpn/issues/536
- https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4
- openSUSE-SU-2020:0301vendor-advisory
- openSUSE-SU-2020:0305vendor-advisory
- FEDORA-2020-42eb8821dbvendor-advisory
- FEDORA-2020-c96ab3c813vendor-advisory
- FEDORA-2020-dcdffcc368vendor-advisory
- https://github.com/adrienverge/openfortivpn/commit/60660e00b80bad0fadcf39aee86f6f8756c94f91
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.