3.9
Low
CVE-2024-35282 A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all…
Description
A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain cleartext passwords via keychain dump.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientiOS 7.2 | 7.2.0 → 7.2.5 | No fix stated |
| FortiClientiOS 7.0 | 7.0.0 → 7.0.9 | No fix stated |
| FortiClientiOS 6.4 | 6.4.0 → 6.4.6 | No fix stated |
| FortiClientiOS 6.2 | 6.2.1 → 6.2.4 | No fix stated |
| FortiClientiOS 6.0 | 6.0.0 → 6.0.5 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified