Fortinet FortiClientMac up to 6.4.10/7.0.10/7.2.4/7.4.0 on macOS signature verification

Summaryinfo

A vulnerability was found in Fortinet FortiClientMac up to 6.4.10/7.0.10/7.2.4/7.4.0 on macOS and classified as critical. This vulnerability affects unknown code. The manipulation results in signature verification. This vulnerability is reported as CVE-2024-40592. The attack requires a local approach. No exploit exists. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Fortinet FortiClientMac up to 6.4.10/7.0.10/7.2.4/7.4.0 on macOS. Affected is an unknown code. The manipulation with an unknown input leads to a signature verification vulnerability. CWE is classifying the issue as CWE-347. The product does not verify, or incorrectly verifies, the cryptographic signature for data. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition during the installation process.

The advisory is shared for download at fortiguard.fortinet.com. This vulnerability is traded as CVE-2024-40592 since 07/05/2024. The exploitability is told to be difficult. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 210875 (Fortinet FortiClient - Missing signature verification (FG-IR-24-022) (macOS)), which helps to determine the existence of the flaw in a target environment.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (210875). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Fortinet

Name

• FortiClientMac

Version

• 6.4.0
• 6.4.1
• 6.4.2
• 6.4.3
• 6.4.4
• 6.4.5
• 6.4.6
• 6.4.7
• 6.4.8
• 6.4.9
• 6.4.10
• 7.0
• 7.0.0
• 7.0.1
• 7.0.2
• 7.0.3
• 7.0.4
• 7.0.5
• 7.0.6
• 7.0.7
• 7.0.8
• 7.0.9
• 7.0.10
• 7.1
• 7.2
• 7.2.0
• 7.2.1
• 7.2.2
• 7.2.3
• 7.2.4
• 7.3
• 7.4.0

License

• commercial

Website

• Vendor: https://www.fortinet.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion