FortiClient (Mac) - update functionality may lead to privilege escalation vulnerability

2023-04-1100:00:00

FortiGuard Labs

www.fortiguard.com

forticlientmac

privilege escalation

integrity check

local attacker

installer modification

software

0.0004 Low

EPSS

Percentile

5.1%

JSON

A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.

CPENameOperatorVersion
forticlientmaceq7.0.7
forticlientmaceq7.0.6
forticlientmaceq7.0.5
forticlientmaceq7.0.4
forticlientmaceq7.0.3
forticlientmaceq7.0.2
forticlientmaceq7.0.1
forticlientmaceq7.0.0
forticlientmaceq6.4.9
forticlientmaceq6.4.8

Name	Operator	Version
forticlientmac	eq	7.0.7
forticlientmac	eq	7.0.6
forticlientmac	eq	7.0.5
forticlientmac	eq	7.0.4
forticlientmac	eq	7.0.3
forticlientmac	eq	7.0.2
forticlientmac	eq	7.0.1
forticlientmac	eq	7.0.0
forticlientmac	eq	6.4.9
forticlientmac	eq	6.4.8

Rows per page:

1-10 of 711

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for FG-IR-22-481