9.4
Critique
CVE-2023-45590 An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through…
Description
An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute unauthorized code or commands via tricking a FortiClientLinux user into visiting a malicious website
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiClientLinux | 7.2.0 | Pas de correctif indiqué |
| FortiClientLinux 7.0 | 7.0.3 → 7.0.10 | Pas de correctif indiqué |
| forticlient | 7.2.0 | Pas de correctif indiqué |
Autres CVE de FortiClientLinux
Les 7 CVE de FortiClientLinux →
CVE-2026-24018
A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4,…
7.4
Élevée
CVE-2020-15934
An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and…
8.6
Élevée
CVE-2024-50570
A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0…
4.9
Moyenne
CVE-2022-45856
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through…
4.6
Moyenne