Skip to main content
pichman
pichman
New Member
April 23, 2020
Question

OpenSSL version and CVE-2020-1967

  • April 23, 2020
  • 2 replies
  • 3120 views

Hi,

 

someone know wich version of openssl is on fortinet 6.2.X and if it is impacted by CVE-2020-1967 ?

 

Thanks

    2 replies

    kphed
    kphed
    New Member
    May 4, 2020

    We asked our TAM about this and received a very generic answer and they would not even provide the version of OpenSSL used 'under-the-hood' stating "proprietary reasons".  We are awaiting an additional update.

    Benny_Lyne_Amorsen
    Benny_Lyne_Amorsen
    New Member
    May 7, 2020

    For at least FortiClientMac, we are in luck. The included OpenSSL is too old to be affected:

     

    2020-04-20 17:53:51: INFO: @(#)This product linked OpenSSL 1.1.1b  26 Feb 2019 ([link]http://www.openssl.org/)[/link]

    Whether that is reassuring obviously depends on your mindset :)

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.