CVE-2024-40586
6.7MEDIUMAn Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSS
Опубликовано: 2/11/2025Обновлено: 7/16/2025
Описание
An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe.
ИИ-АнализНа базе ИИ
Затронутые продукты
fortinetforticlient
fortinetforticlient
fortinetforticlient
7.4.0
Ссылки
- https://fortiguard.fortinet.com/psirt/FG-IR-23-279Vendor Advisory