CVE-2023-41840

Summary: CVE-2023-41840 affects Fortinet FortiClient for Windows ( FortiClientWindows 7.0.9 ). The issue is a local untrusted search path that enables a DLL hijack by placing a malicious OpenSSL engine library in the search path. Connected sources provide concrete details: FortiClientWindows 7.0....

Fortinet Releases Security Updates for FortiClient and FortiGate

Fortinet has released security advisories addressing vulnerabilities in FortiClient and FortiGate. Cyber threat actors may exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Fortinet security advisories and...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...

Fortinet FortiClient Security Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...

PT-2023-13889 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClient Windows versions 7.0.0 through 7.0.7 Fortinet FortiClient Windows versions 6.4.0 through 6.4.9 Fortinet FortiClient Windows versions 6.2.0 through 6.2.9 Fortinet FortiClient Windows versions 6.0.0 through 6.0.10...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A path traversal vulnerability exists in Fortinet...

PT-2023-7194 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientWindows version 7.0.9 Description: The issue is related to an untrusted search path vulnerability that allows an attacker to perform a DLL Hijack attack. This can be achieved by placing a malicious OpenSSL engine library i...

PT-2023-7272 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClient versions 7.0.0 through 7.0.9 Fortinet FortiClient versions 7.2.0 through 7.2.1 Description: The issue is related to the use of hard-coded credentials in Fortinet FortiClient for Windows, allowing an attacker to bypass...

The vulnerability of the Fortinet FortiClient protection mechanism lies in the lack of protection for service data, which allows attackers to exploit this weakness to disclose the protected information.

The vulnerability of the Fortinet FortiClient security device lies in the lack of protection for operational data. Exploiting this vulnerability could allow attackers to disclose the protected information...

CVE-2023-37939

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all...

CVE-2023-37939

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all...

Code injection

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all...

CVE-2023-37939

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all...

CVE-2023-37939

CVE-2023-37939 concerns FortiClient information disclosure: a local authenticated user with no administrative privileges may retrieve the list of files or folders excluded from malware scanning. Affected products span FortiClient for Windows (versions 6.2–7.2.0, 7.0 all versions? and 7.2.x), Linu...

CVE-2023-37939

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all...

Fortinet FortiClient Security Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient,...

The vulnerability of the server management interface for Fortinet FortiClient Enterprise Management Server programs allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the server management interface for Fortinet FortiClient Enterprise Management Server EMS is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Fortinet FortiClient security device for Windows, related to improper authorization, allows a perpetrator to execute arbitrary code or commands.

The vulnerability of the Fortinet FortiClient security device for Windows relates to improper authentication. Exploiting this vulnerability allows an attacker to execute arbitrary code or commands using a specially created request...

CVE-2021-44172

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the E...

Fortinet FortiClient VPN Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiClient VPN. Authentication is required to exploit this vulnerability. The specific flaw exists within the FortiClient Logging daemon. The product applies insufficient access controls to...