CVE-2024-31492

Name of the Vulnerable Software and Affected Versions FortiClientMac versions 7.2.3 and below FortiClientMac version 7.0.10 and below installer

Description The issue is related to an external control of file name or path vulnerability, which may allow a local attacker to execute arbitrary code or commands by writing a malicious configuration file in /tmp before starting the installation process.

Recommendations For FortiClientMac versions 7.2.3 and below, consider disabling the installation process until a patch is available. For FortiClientMac version 7.0.10 and below installer, restrict access to the /tmp directory to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.