Detections
Analytics
CVE-2024-47574
high
Description
A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages.
References
https://www.theregister.com/2024/11/14/fortinet_vpn_authentication_bypass_bug/
https://www.securityweek.com/citrix-fortinet-patch-high-severity-vulnerabilities/