← Back

CVE-2024-35282

nvd nist
Published: Sep 10, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.6
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.9 / Impact: 3.6
Source: NVD

Description

A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain cleartext passwords via keychain dump.

Affected (1)

Fortinet
1 product
Forticlient
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Forticlient
From 6.0.0 to 7.2.5

Related CWEs

CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
CWE-316
Cleartext Storage of Sensitive Information in Memory
The product stores sensitive information in cleartext in memory.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.