FortiClientにコード実行の脆弱性、修正版あり
Summary
FortiClientのMac版とWindows版に、外部の攻撃者がコードやコマンドを実行できる脆弱性が公表され、修正版も出ています。社員のパソコンに入れている組織は、使っている版を洗い出し、系統ごとの修正版へ更新してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
FortiClientのMac版とWindows版に、外部の攻撃者がコードやコマンドを実行できる脆弱性が公表され、修正版も出ています。社員のパソコンに入れている組織は、使っている版を洗い出し、系統ごとの修正版へ更新してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| FortinetFortiClientMac |
7.4.0 – 7.4.7→ Not listed |
Not listed |
| FortinetFortiClientWindows |
7.4.0 – 7.4.7→ Not listed 7.2.0 – 7.2.14→ Not listed |
Not listed Not listed |
| FortinetFortiClientWindowsPAM | — | Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web fortiguard.fortinet.com
- web nvd.nist.gov
- web github.com