#VU107313 Improper authentication in FortiClient (macOS) - CVE-2024-52968

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU107313

#VU107313 Improper authentication in FortiClient (macOS) - CVE-2024-52968

Published: April 9, 2025


Vulnerability identifier: #VU107313
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2024-52968
CWE-ID: CWE-287
Exploitation vector: Local access
Exploit availability: No public exploit available
Vulnerable software:
FortiClient (macOS)
Software vendor:
Fortinet, Inc

Description

The vulnerability allows an attacker to bypass authentication.

The vulnerability exists due to missing authentication in FortiMonitor Agent. An attacker with physical access to device can login to the system without a password as a standard user.


Remediation

Install updates from vendor's website.

External links