CVE-2024-52968: High severity fortinet forticlient vulnerability
Published Feb 11, 2025
·Updated
An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.
Affected Software
4 affected components
Fortinet FortiClientMac>=7.0.11<=7.2.4
Fortinet Forticlient Macos>=7.0.11<7.0.13
Fortinet Forticlient Macos>=7.2.3<7.2.5
Fortinet Forticlient Macos=7.4.0
Remediation
Information
Please upgrade to FortiClientMac version 7.4.1 or above
Please upgrade to FortiClientMac version 7.2.5 or above
Please upgrade to FortiClientMac version 7.0.13 or above
Event History
Feb 11, 2025
CVE Published
via MITRE·04:09 PM
Data Sourced
via MITRE·04:09 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-52968?
CVE-2024-52968 is classified as a medium severity vulnerability due to improper authentication that allows unauthorized access.
2
How do I fix CVE-2024-52968?
To fix CVE-2024-52968, update Fortinet FortiClientMac to the latest version beyond 7.2.4.
3
Which versions of Fortinet FortiClientMac are affected by CVE-2024-52968?
CVE-2024-52968 affects Fortinet FortiClientMac versions 7.0.11 through 7.2.4.
4
What type of vulnerability is CVE-2024-52968?
CVE-2024-52968 is an improper authentication vulnerability that allows attackers to bypass security mechanisms.
5
What can attackers do with CVE-2024-52968?
With CVE-2024-52968, attackers can gain unauthorized access to MacOS systems using an empty password.