PT-2024-9823 · Fortinet · Fortigate+3

Published 2024-09-10 · Updated 2024-09-20 · CVE-2024-31489

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FortiClientWindows versions 7.0.0 through 7.0.11, 7.2.0 through 7.2.2 FortiClientLinux versions 7.0.0 through 7.0.11, 7.2.0 FortiClientMac versions 7.0.0 through 7.0.11, 7.2.0 through 7.2.4

Description: The issue is related to an improper certificate validation vulnerability, which may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the FortiGate and the FortiClient during the ZTNA tunnel creation. This vulnerability affects the communication channel and could be exploited by an attacker to intercept or modify data.

Recommendations: For FortiClientWindows versions 7.0.0 through 7.0.11, update to a version that includes the fix for the improper certificate validation vulnerability. For FortiClientWindows versions 7.2.0 through 7.2.2, update to a version that includes the fix for the improper certificate validation vulnerability. For FortiClientLinux versions 7.0.0 through 7.0.11, update to a version that includes the fix for the improper certificate validation vulnerability. For FortiClientLinux version 7.2.0, update to a version that includes the fix for the improper certificate validation vulnerability. For FortiClientMac versions 7.0.0 through 7.0.11, update to a version that includes the fix for the improper certificate validation vulnerability. For FortiClientMac versions 7.2.0 through 7.2.4, update to a version that includes the fix for the improper certificate validation vulnerability. As a temporary workaround, consider restricting access to the vulnerable communication channel between the FortiGate and the FortiClient during the ZTNA tunnel creation until a patch is available.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2024-11599

CVE-2024-31489

Affected Products

Forticlientlinux

Forticlientmac

Forticlientwindows

Fortigate

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-31489 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-22-282 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-31489 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11599 · Security Note
• https://twitter.com/CVEnew/status/1833549077164003485 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1833545895721193659 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB20240910155 · Note
• https://t.me/cvedetector/5249 · Telegram Post
• https://t.me/cvenotify/95532 · Telegram Post