CVE-2024-40586
published 2025-02-11CVE-2024-40586: An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local…
medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | forticlient | — | — |
| fortinet | forticlient | — | — |
| fortinet | forticlient | >= 7.0.3 < 7.0.14 | 7.0.14 |
| fortinet | forticlient | >= 7.2.0 < 7.2.7 | 7.2.7 |
| fortinet | forticlientwindows | — | — |
| fortinet | forticlientwindows | 7.0.3 – 7.0.13 | — |
| fortinet | forticlientwindows | 7.2.0 – 7.2.6 | — |
| fortinet | fortisslvpnd | — | — |