Security Advisory

CVE-2020-7041

5.3
MEDIUM

Vulnerability Description

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.
Published Date February 27, 2020
Official Source NIST NVD Advisory