CVE-2020-7041: 
FortiClient VPN vulnerability analysis and mitigation

CVE-2020-7041 is a security vulnerability discovered in openfortivpn version 1.11.0 when used with OpenSSL 1.0.2 or later. The issue involves incorrect handling of certificate validation in the tunnel.c file, where an X509_check_host negative error code is incorrectly interpreted as a successful return value (CVE Details, NVD).

The vulnerability stems from a flaw in the certificate validation process within the tunnel.c file. The issue specifically relates to how the X509_check_host function's return value is handled. The vulnerability was introduced with pull request #242 and affected proper host name verification when OpenSSL version 1.0.2 or later was in use, starting from openfortivpn version 1.7.0 (GitHub Commit).

The vulnerability could potentially compromise the security of the VPN connection by allowing improper certificate validation, which might lead to security issues in the PPP+SSL VPN tunnel services (OpenSUSE Security).

The vulnerability was fixed in openfortivpn version 1.12.0. Users are advised to upgrade to this version or later. The fix involves correctly checking the return value of X509_check_host function (GitHub Changelog, Fedora Update).