PT-2024-8517 · Fortinet · Forticlient

Published 2024-11-12 · Updated 2024-11-14 · CVE-2024-40592

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClient MacOS versions 7.4.0, 7.2.4 and below, 7.0.10 and below, 6.4.10 and below

Description The issue is related to an improper verification of cryptographic signature, which may allow a local authenticated attacker to swap the installer with a malicious package via a race condition during the installation process. This could potentially impact the confidentiality, integrity, and availability of information.

Recommendations For versions 7.4.0, 7.2.4 and below, 7.0.10 and below, 6.4.10 and below, consider disabling the installation process until a patch is available to prevent exploitation. As a temporary workaround, restrict access to the installation module to minimize the risk of exploitation. Avoid using the affected FortiClient MacOS versions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Time Of Check To Time Of Use

Weakness Enumeration

CWE-347

CWE-367

Related Identifiers

BDU:2024-10077

CVE-2024-40592

Affected Products

Forticlient

References · 6

• https://fortiguard.fortinet.com/psirt/FG-IR-24-022 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10077 · Security Note
• https://osv.dev/vulnerability/CVE-2024-40592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40592 · Security Note
• https://twitter.com/VulmonFeeds/status/1856545761430745563 · Twitter Post
• https://twitter.com/CVEnew/status/1856828058759745865 · Twitter Post