CVE-2023-22635
Published Apr 11, 2023
Last updated a year ago
Overview
- Description
- A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.
- Source
- psirt@fortinet.com
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "9042C015-3FBF-43C0-9E0A-10C761AF1B68",
"versionEndIncluding": "5.6.6",
"versionStartIncluding": "4.0.0"
},
{
"criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "38117A67-11E8-4928-8450-E9B85265747A",
"versionEndIncluding": "6.4.10",
"versionStartIncluding": "6.0.0"
},
{
"criteria": "cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*",
"vulnerable": true,
"matchCriteriaId": "C1EA50D1-71A4-4687-B921-54B66A1E1BBF",
"versionEndExcluding": "7.0.8",
"versionStartIncluding": "7.0.0"
}
],
"operator": "OR"
}
]
}
]