PT-2024-9824 · Fortinet · Forticlient Vpn

Published 2024-09-10 · Updated 2024-09-20 · CVE-2024-35282

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: FortiClient VPN iOS versions 6.0 through 7.2

Description: A cleartext storage of sensitive information in memory issue may allow an unauthenticated attacker with physical access to a jailbroken device to obtain cleartext passwords via keychain dump. This issue is related to the storage of confidential information in unencrypted form in memory, which can be exploited to gain unauthorized access to protected information.

Recommendations: For FortiClient VPN iOS versions 6.0 through 7.2, consider disabling the keychain dump functionality as a temporary workaround until a patch is available. Restrict access to the device to minimize the risk of exploitation, especially on jailbroken devices.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-316

CWE-312

Related Identifiers

BDU:2024-11600

CVE-2024-35282

Affected Products

Forticlient Vpn

References · 10

• https://fortiguard.fortinet.com/psirt/FG-IR-24-139 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11600 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35282 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35282 · Security Note
• https://twitter.com/CVEnew/status/1833549079823192258 · Twitter Post
• https://t.me/cvedetector/5245 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1833548165166801282 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB20240910156 · Note
• https://vuldb.com/?id.276981 · Note
• https://t.me/cvenotify/95535 · Telegram Post