FortiNAC-F - Lack of certificate validation

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.

attack attacker certificate channel communication cwe device fortinac fortios https inventory man-in-the-middle may unauthenticated validation vulnerability