VDB

GCVE-110-CERTCC-2012-111708

GCVE-110-CERTCC-2012-111708
Advisory PublishedCVSS 4.6/10
Vulnetix · Advisory published October 22, 2012
Fortigate UTM appliances that support SSL/TLS deep packet inspection share the same self-signed Fortigate CA certificate and associated private key across all devices. The private key, which has been compromised, allows attackers to create and sign fake certificates.
Download JSON Open in Console

Risk Scores

CVSS 2.0
4.6/10
Medium · AV:A/AC:H/Au:N/C:C/I:N/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score3.7remediation_levelWreport_confidenceUCenvironmental_score3.7target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-4948

Transitive aliases

GSD-2012-4948VAR-201211-0266GHSA-p5m6-f3fp-3v88

References

Fortigate UTM appliances share the same default CA certificate
url
Fortigate UTM appliances share the same default CA certificate
url
Fortigate UTM appliances share the same default CA certificate
url
Fortigate UTM appliances share the same default CA certificate
url
Fortigate UTM appliances share the same default CA certificate
url
Fortigate UTM appliances share the same default CA certificate
advisory

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›