CVE-2024-40586
6.7MEDIUMAn Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSS
Publicado: 2/11/2025Atualizado: 7/16/2025
Descrição
An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe.
Análise IADesenvolvido por IA
Produtos Afetados
fortinetforticlient
fortinetforticlient
fortinetforticlient
7.4.0
Referências
- https://fortiguard.fortinet.com/psirt/FG-IR-23-279Vendor Advisory