CVE-2024-40586
6.7MEDIUMAn Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSS
게시됨: 2/11/2025업데이트됨: 7/16/2025
설명
An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe.
AI 분석AI 기반
영향받는 제품
fortinetforticlient
fortinetforticlient
fortinetforticlient
7.4.0
참조
- https://fortiguard.fortinet.com/psirt/FG-IR-23-279Vendor Advisory