CVE-2024-52968

Summary

An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.

Affected Software

VendorProductVersion RangeStatus
FortinetFortiClientMac7.4.0affected
FortinetFortiClientMac7.2.3 <= 7.2.4affected
FortinetFortiClientMac7.0.11 <= 7.0.12affected

Weaknesses

  • CWE-287: Improper access control

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References