CVE-2023-22635 | THREATINT

Description

A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.

PUBLISHED Reserved 2023-01-05 | Published 2023-04-11 | Updated 2024-10-23 | Assigner fortinet

MEDIUM: 6.9CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:P/RL:X/RC:X

Problem types

Escalation of privilege

Product status

Default status

unaffected

7.0.0 (semver)

affected

6.4.0 (semver)

affected

6.2.0 (semver)

affected

6.0.1 (semver)

affected

5.6.5 (semver)

affected

5.6.3

affected

5.6.0 (semver)

affected

5.4.0 (semver)

affected

5.2.0 (semver)

affected

5.0.0 (semver)

affected

4.0.0 (semver)

affected

References

fortiguard.com/psirt/FG-IR-22-481

cve.org (CVE-2023-22635)

nvd.nist.gov (CVE-2023-22635)

Download JSON