Medium WID-SEC-2023-0929 3 CVEs

Fortinet FortiClient Windows: Mehrere Schwachstellen

Published Apr 11, 2023 · Updated Apr 11, 2023 · de-DE

Vendor: Fortinet Product: FortiClient Product: FortiClient Windows < 7.0.8 Product: FortiClient Windows < 7.2.0 Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiClient Windows ausnutzen, um Dateien zu manipulieren und seine Rechte zu erweitern.

Product

FortiClient ist ein Endgeräteschutz mit einem integrierten VPN-Client.

Vulnerabilities 3

High 7.3

CVE-2022-43946

Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and…

Fortinet FortiClientWindows Network devices

Apr 11, 2023
High 7.1

CVE-2022-40682

A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0…

Fortinet FortiClientWindows Network devices

Apr 11, 2023
High 7.1

CVE-2022-42470

A relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 a…

Fortinet FortiClientWindows Network devices

Apr 11, 2023

Revision history

2023-04-11 #1
Initiale Fassung

References

Fortiguard PSIRT Advisories - FG-IR-22-429 vom 2023-04-11
https://fortiguard.fortinet.com/psirt/FG-IR-22-429
Fortiguard PSIRT Advisories - FG-IR-22-336 vom 2023-04-11
https://fortiguard.fortinet.com/psirt/FG-IR-22-336
Fortiguard PSIRT Advisories - G-IR-22-320 vom 2023-04-11
https://fortiguard.fortinet.com/psirt/FG-IR-22-320