Description
A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiClientWindows | 7.4.0, 7.2.0 – ≤ 7.2.4, 7.0.0 – ≤ 7.0.12, 6.4.0 – ≤ 6.4.10 | — |
Advisories 2
- NCSC-2024-0445 Kwetsbaarheden verholpen in Fortinet FortiClient NCSC-NL (Netherlands) · Nov 14, 2024
- WID-SEC-2024-3450 Fortinet FortiClient für macOS und Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2024