CVE-2023-22635

6.9MEDIUM

Key Information:

Vendor
Fortinet
Status
Forticlientmac
Vendor
CVE Published:
11 April 2023

Summary

A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.

Affected Version(s)

FortiClientMac 7.0.0 <= 7.0.7

FortiClientMac 6.4.0 <= 6.4.10

FortiClientMac 6.2.0 <= 6.2.9

References

https://fortiguard.com/psirt/FG-IR-22-481

CVSS V3.1

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.