What is GHSA-47gg-69h8-fx9p?

GHSA-47gg-69h8-fx9p is a security advisory published by GitHub Security Advisories with Medium severity. An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,...

Which CVE IDs does GHSA-47gg-69h8-fx9p cover?

GHSA-47gg-69h8-fx9p covers the following CVE IDs: CVE-2025-24471. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-47gg-69h8-fx9p?

GHSA-47gg-69h8-fx9p has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-47gg-69h8-fx9pMediumCVSS 6.5

An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,...

Vendor

GitHub Security Advisories

Published

June 10, 2025

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2025-24471 →

📋 Description

An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-24471
https://fortiguard.fortinet.com/psirt/FG-IR-24-544
https://cert-portal.siemens.com/productcert/html/ssa-864900.html
https://github.com/advisories/GHSA-47gg-69h8-fx9p