CVE-2024-35281

Summary of CVE-2024-35281 : An improper isolation/compartmentalization (CWE-653) vulnerability in Fortinet FortiClientMac (versions 7.4.2 and below; 7.2.8 and below; 7.0 all) and FortiVoiceUCDesktop 3.0 (all versions) may allow an authenticated attacker to inject code via Electron environment var...

Code Execution due to Node.JS Environment Variable

An improper isolation or compartmentalization vulnerability CWE-653 in FortiClient MacOS and FortiVoiceUC desktop application may allow an authenticated attacker to inject code via Electron environment variables...