6.9
Medium
CVE-2023-22635 A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4…
Description
A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientMac 7.0 | 7.0.0 → 7.0.7 | No fix stated |
| FortiClientMac 6.4 | 6.4.0 → 6.4.10 | No fix stated |
| FortiClientMac 6.2 | 6.2.0 → 6.2.9 | No fix stated |
| FortiClientMac 6.0 | 6.0.1 → 6.0.10 | No fix stated |
| FortiClientMac 5.6 | 5.6.0 → 5.6.6 | No fix stated |
| FortiClientMac 5.4 | 5.4.0 → 5.4.4 | No fix stated |
| FortiClientMac 5.2 | 5.2.0 → 5.2.6 | No fix stated |
| FortiClientMac 5.0 | 5.0.0 → 5.0.10 | No fix stated |
| FortiClientMac 4.0 | 4.0.0 → 4.0.3 | No fix stated |
Other CVEs of FortiClientMac
The 15 CVEs of FortiClientMac →
CVE-2025-46774
An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2…
6.8
Medium
CVE-2025-31365
An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through…
5.5
Medium
CVE-2025-57741
An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through…
7.0
High
CVE-2025-25251
An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0…
7.4
High