CVE Vulnerabilities

CVE-2024-52968

Improper Authentication

Published: Feb 11, 2025 | Modified: Jul 16, 2025
CVSS 3.x
8.4
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Forticlient Fortinet 7.0.11 (including) 7.0.13 (excluding)
Forticlient Fortinet 7.2.3 (including) 7.2.5 (excluding)
Forticlient Fortinet 7.4.0 (including) 7.4.0 (including)

Potential Mitigations

References