CVE-2023-22635

Description

A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.

Reserved 2023-01-05 | Published 2023-04-11 | Updated 2024-10-23 | Assigner fortinet

Problem types

Escalation of privilege

Product status

Default status
unaffected

7.0.0
affected

6.4.0
affected

6.2.0
affected

6.0.1
affected

5.6.5
affected

5.6.3
affected

5.6.0
affected

5.4.0
affected

5.2.0
affected

5.0.0
affected

4.0.0
affected

References

fortiguard.com/psirt/FG-IR-22-481

cve.org (CVE-2023-22635)

nvd.nist.gov (CVE-2023-22635)

Download JSON