Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortinet_forticlientmac:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortinet Forticlientmac (26cb42e3-5abf-5bac-b8ce-acb767005aa9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-33878 vulnerable 2026-06-08 05:44:51.285713 Details available
LOW (2.2)
An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal.
Published: 2022-11-02T00:00:00.000Z
Updated: 2024-10-22T20:53:05.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42754 vulnerable 2026-06-08 05:35:22.515650 Details available
LOW (3.2)
An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file.
Published: 2021-11-02T18:56:19.000Z
Updated: 2024-10-25T13:43:40.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26089 vulnerable 2026-06-08 05:30:41.923933 Details available
MEDIUM (6.7)
An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase.
Published: 2021-07-12T12:48:01.000Z
Updated: 2024-10-25T13:56:00.954Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.