PT-2025-6265 · Fortinet · Forticlientmac

Published 2025-02-11 · Updated 2025-07-16 · CVE-2024-52968

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientMac versions 7.0.11 through 7.2.4

Description: The issue is related to improper authentication, allowing an attacker to gain unauthorized access to MacOS via an empty password. This is due to deficiencies in the authentication procedure. The exploitation of this issue can lead to an attacker obtaining improper access to the system.

Recommendations: For Fortinet FortiClientMac versions 7.0.11 through 7.2.4, update to a version that fixes the improper authentication issue to prevent unauthorized access to MacOS. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-01612

CVE-2024-52968

Affected Products

Forticlientmac

References · 8

• https://bdu.fstec.ru/vul/2025-01612 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-24-300 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-52968 · Security Note
• https://osv.dev/vulnerability/CVE-2024-52968 · Vendor Advisory
• https://t.me/cvedetector/17719 · Telegram Post
• https://vuldb.com/de/?id.295281 · Note
• https://twitter.com/CVEnew/status/1889355111744368942 · Twitter Post
• https://t.me/cvenotify/129180 · Telegram Post