PT-2024-3550 · Fortinet · Forticlientmac

Published 2024-04-09 · Updated 2025-01-23 · CVE-2024-31492

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClientMac versions 7.2.3 and below FortiClientMac version 7.0.10 and below installer

Description The issue is related to an external control of file name or path vulnerability, which may allow a local attacker to execute arbitrary code or commands by writing a malicious configuration file in /tmp before starting the installation process.

Recommendations For FortiClientMac versions 7.2.3 and below, consider disabling the installation process until a patch is available. For FortiClientMac version 7.0.10 and below installer, restrict access to the /tmp directory to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2024-03855

CVE-2024-31492

Affected Products

Forticlientmac

References · 8

• https://fortiguard.com/psirt/FG-IR-23-345 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31492 · Security Note
• https://osv.dev/vulnerability/CVE-2024-31492 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03855 · Security Note
• https://t.me/cvenotify/108362 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1778068893958824241 · Twitter Post
• https://t.me/true_secator/5629 · Telegram Post
• https://twitter.com/CVEnew/status/1778118951530082706 · Twitter Post