Skip to content
fr Sign in
9.4 Critical

CVE-2023-45590 An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through…

Description

An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute unauthorized code or commands via tricking a FortiClientLinux user into visiting a malicious website

Affected products and versions

Product Affected versions Fixed in
FortiClientLinux 7.2.0 No fix stated
FortiClientLinux 7.0 7.0.3 → 7.0.10 No fix stated
forticlient 7.2.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiClientLinux

The 7 CVEs of FortiClientLinux →
CVE-2026-24018 A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4,… 7.4 High CVE-2020-15934 An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and… 8.6 High CVE-2024-50570 A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0… 4.9 Medium CVE-2022-45856 An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through… 4.6 Medium
Track this CVE