medium6.7
CVE-2024-40586
An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local us…
Impact
An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Forticlient | from 7.0.3 before 7.0.14 from 7.2.0 before 7.2.7 Version 7.4.0 |