VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Jul 18, 2022· Updated Jun 17, 2026

CVE-2021-22131

CVE-2021-22131

Description

A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks.

Affected products

34
  • Fortinet/Fortitoken Mobile30 versions
    cpe:2.3:a:fortinet:fortitoken_mobile:0.4.10:*:*:*:*:android:*:*+ 29 more
    • cpe:2.3:a:fortinet:fortitoken_mobile:0.4.10:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:0.4.20:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.0:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.2:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.2:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.3:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.3:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.4:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.4:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:3.0.5:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.0.0:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.0.1:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.0.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.1.0:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.1.1:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.1.1:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.2.0:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.2.1:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.2.2:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.3.0:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.3.0:*:*:*:*:ios:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.4.0:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:4.5.0:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:5.0.2:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:5.0.3:*:*:*:*:android:*:*
    • cpe:2.3:a:fortinet:fortitoken_mobile:5.2.0:*:*:*:*:ios:*:*
  • Fortinet/FortiTokenAndroidllm-fuzzy
    Range: <=5.0.3
  • Fortinet/FortiTokeniOSllm-fuzzy
    Range: <=5.2.0
  • Fortinet/FortiTokenWinAppllm-fuzzy
    Range: <=4.0.3
  • Fortinet/Fortinet FortiTokenAndroid, Fortinet FortiTokeniOS, Fortinet FortiTokenWinAppv5
    Range: FortiTokenAndroid 5.0.3, 5.0.2, 4.5.0, 4.4.0, 4.3.0, 4.2.2, 4.2.1, 4.1.1, 4.0.1, 4.0.0, 3.0.4, 3.0.3, 3.0.2, 3.0.1, 3.0.0, 0.4.20, 0.4.10, FortiTokeniOS 5.2.0, 4.3.0, 4.2.0, 4.1.1, 3.0.5, 3.0.4, 3.0.3, 3.0.2, 3.0.1, FortiTokenWinApp 4.0.3, 3.0.1, 3.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.