Security Advisory
CVE-2021-41019
3.5
LOW
Vulnerability Description
An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials.
Published Date
November 2, 2021
Official Source
NIST NVD Advisory