Fortinet FortiToken Mobile (FTM) 4.3.0 for Android
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortitoken_mobile:4.3.0:*:*:*:*:android:*:*
part: a version: 4.3.0 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortitoken Mobile (c24ed8a5-9621-5580-b04d-e6eeb1920145) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-44166 |
vulnerable | 2026-06-08 05:36:45.066590 |
Details available
MEDIUM (4.1)
An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny button is clicked by the legitimate user.
Published: 2022-03-02T10:00:26.000Z
Updated: 2024-10-22T21:00:22.919Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22131 |
vulnerable | 2026-06-08 05:29:59.916899 |
Details available
MEDIUM (6.4)
A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks.
Published: 2022-07-18T16:35:56.000Z
Updated: 2024-10-22T20:56:26.493Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.