CVE-2024-40592
6.7
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD
Description
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition during the installation process.
Affected (2)
Products: Fortinet: Forticlient
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.4.0 to 7.2.5 |
References (1)
Timeline
No history available yet.