Description
Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 3 May 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.