CVE-2015-5735

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

CVE-2015-5737

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, 4 mdare6452.sys, and 5 Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a P...

CVE-2015-5737: Undefined Security Weakness

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, 4 mdare6452.sys, and 5 Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a P...

CVE-2015-4077: Exposure of Sensitive Information to an Unauthorized Actor

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...

CVE-2015-5736: Undefined Security Weakness

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a 1 0x220024 or 2 0x220028 ioctl call...

CVE-2015-5735: Undefined Security Weakness

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

FortiClient Antivirus Multiple Vulnerabilities

None...

Mulitple Vulnerabilities in FortiClient

...

Fortinet FortiClient SSLVPN Linux Client Local Privilege Vulnerability

Fortinet FortiClient is a Fortinet security software solution for endpoints that provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication, etc. FortiClient SSLVPN Linux client is a Linux client software for SSL VPN Virtual Private Network products...

FortiClient SSLVPN Linux client local privilege escalation vulnerability

...

FortiClient Android and iOS multiple vulnerabilities

...

Fortinet FortiClient Man-in-the-Middle Attack Vulnerability (CNVD-2015-01147)

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. Fortinet FortiClient 5.2.3.091 for Android 5.2.028 for iOS suffers from a man-in-the-middle attack vulnerability that could allow an attacker to spoof a server wit...

Fortinet FortiClient Man-in-the-Middle Attack Vulnerability (CNVD-2015-01148)

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. Fortinet FortiClient 5.2.028 for iOS suffers from a man-in-the-middle attack vulnerability that allows attackers to spoof SSL VPN servers with a crafted certificat...

CVE-2015-1570

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2015-1569

Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate...

Design/Logic Flaw

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2015-1569

Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate...

CVE-2015-1570

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2015-1570

Fortinet FortiClient on Android (5.2.3.091) and iOS (5.2.028) is affected by a certificate validation failure in the Endpoint Control protocol, enabling MITM via a crafted certificate. Root cause: the protocol does not validate certificates. Impact: potential server spoofing with partial integrit...

CVE-2015-1569

CVE-2015-1569 affects Fortinet FortiClient 5.2.028 for iOS, where certificate validation is not performed, enabling man-in-the-middle attackers to spoof SSL VPN servers with a crafted certificate. This is the explicit impact described in multiple connected sources; further exploitation details or...