CVE-2015-1569: Fortinet FortiClient

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate.

Affected products

• Fortinet FortiClient: version 5.2.028 only

Published 2015-02-10. Last modified 2026-06-17.