6.4.2

DATE	CVE	VULNERABILITY TITLE	RISK
2021-06-02	CVE-2021-24012	Improper Certificate Validation vulnerability in Fortinet Fortios An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted Certificate Authority. network low complexity fortinet CWE-295	7.3
2021-03-04	CVE-2020-15938	Unspecified vulnerability in Fortinet Fortios When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below 6.4.2 on port 80/443, it is not redirected to the transparent proxy policy for processing, as it doesn't have a valid HTTP header. network low complexity fortinet	7.5