cbcvebase.
CVE-2024-50564
published 2025-01-14

CVE-2024-50564: A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a…

low3.3CVSS 3.1
AVLACLPRLUINSUCLINAN
A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped.

Affected

9 ranges
VendorProductVersion rangeFixed in
fortinetforticlient
fortinetforticlient
fortinetforticlient>= 6.4.0 < 7.2.97.2.9
fortinetforticlientwindows
fortinetforticlientwindows
fortinetforticlientwindows6.4.0 – 6.4.10
fortinetforticlientwindows7.0.0 – 7.0.14
fortinetforticlientwindows7.2.0 – 7.2.7
fortinetfortinet