VYPR
← All advisories
High severity8.2NVD Advisory· Published Apr 10, 2024· Updated Jun 17, 2026

CVE-2024-31492

CVE-2024-31492

Description

An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process.

Affected products

3
  • Fortinet/Forticlient2 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*range: >=7.0.6,<7.0.11
    • (no CPE)range: 7.2.0
  • Fortinet/FortiClientMacllm-fuzzy
    Range: <=7.2.3, <=7.0.10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.