CVE-2024-52968
An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.
Severity
Medium 5.8
CVSS 3.1
Exploited
Not listed
EPSS
0.002
14.0th percentile
Discovered by
Not disclosed
Published
Feb 11, 2025
Assigned by fortinet
Description
An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.
Weakness: CWE-287
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiClient | Endpoint / EDR | cna-assigner |
Vendor-reported affected versions (1)
- Fortinet · FortiClientMac
Vendor remediation
Please upgrade to FortiClientMac version 7.4.1 or above Please upgrade to FortiClientMac version 7.2.5 or above Please upgrade to FortiClientMac version 7.0.13 or above