Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiClient ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu erzeugen.
Product
FortiClient ist ein Endgeräteschutz mit einem integrierten VPN-Client.
Vulnerabilities 5
-
Medium 6.9
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortin…
-
Medium 6.4
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.…
-
Medium 5.5
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientE…
-
Medium 4.6
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7,…
-
Low 3.9
A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all ve…
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-22-230 vom 2024-09-10
https://fortiguard.fortinet.com/psirt/FG-IR-22-230
-
FortiGuard PSIRT Advisory FG-IR-22-282 vom 2024-09-10
https://fortiguard.fortinet.com/psirt/FG-IR-22-282
-
FortiGuard PSIRT Advisory FG-IR-23-362 vom 2024-09-10
https://fortiguard.fortinet.com/psirt/FG-IR-23-362
-
FortiGuard PSIRT Advisory FG-IR-24-123 vom 2024-09-10
https://fortiguard.fortinet.com/psirt/FG-IR-24-123
-
FortiGuard PSIRT Advisory FG-IR-24-139 vom 2024-09-10
https://fortiguard.fortinet.com/psirt/FG-IR-24-139