CVE-2023-45588: High severity fortinet forticlient vulnerability

Q: What is the severity of CVE-2023-45588?

CVE-2023-45588 is considered a high-severity vulnerability due to its potential for arbitrary code execution.

Q: How do I fix CVE-2023-45588?

To fix CVE-2023-45588, upgrade FortiClientMac to version 7.2.4 or later, or 7.0.11 or later.

Q: Who is affected by CVE-2023-45588?

CVE-2023-45588 affects users of FortiClientMac versions 7.2.3 and below, as well as 7.0.10 and below.

Q: What kind of vulnerability is CVE-2023-45588?

CVE-2023-45588 is an external control of file name or path vulnerability, classified under CWE-73.

Q: Can CVE-2023-45588 be exploited remotely?

CVE-2023-45588 requires local access for exploitation, as it involves manipulating configuration files before installation.

Published Mar 14, 2025

Updated

An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process.

Affected Software

3 affected components

Fortinet FortiClientMac<=7.2.3, <=7.0.10

Fortinet Forticlient Macos>=7.0.6<7.0.11

Fortinet Forticlient Macos>=7.2.0<7.2.4

Remediation

Information

Please upgrade to FortiClientMac version 7.2.4 or above Please upgrade to FortiClientMac version 7.0.11 or above

Event History

Mar 14, 2025

CVE Published

via MITRE·03:46 PM

Data Sourced

via MITRE·03:46 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-45588?

CVE-2023-45588 is considered a high-severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2023-45588?

To fix CVE-2023-45588, upgrade FortiClientMac to version 7.2.4 or later, or 7.0.11 or later.

Who is affected by CVE-2023-45588?