Vulnerability · Published Apr 11, 2023 · Assigned by fortinet
CVE-2023-22635
Medium 6.9
In plain English
A medium-severity security flaw in FortiClientMac from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Official description
A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiClientMac | 7.0.0 – through 7.0.76.4.0 – through 6.4.106.2.0 – through 6.2.96.0.1 – through 6.0.105.6.5 – through 5.6.65.6.35.6.0 – through 5.6.15.4.0 – through 5.4.4 |
Weakness: CWE-494 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:P/RL:X/RC:X