What is CVE-2023-22635?

CVE-2023-22635 is a high-severity vulnerability in Fortinet Forticlient, classified under Download of Code Without Integrity Check. CVSS score: 7.3/10. Published 2023-04-11.

How severe is CVE-2023-22635?

High severity. CVSS v3 base score is 7.3 out of 10.

Vulnerability in Fortinet Forticlient

CVE-2023-22635

A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.

EPSS: 0.001 (2.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L.

Affected products

Fortinet Forticlient
Fortinet Forticlientmac — versions 7.0.0, 6.4.0, 6.2.0

Weakness classification (CWE)

CWE-494 — Download of Code Without Integrity Check

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-22635?: CVE-2023-22635 is a high-severity vulnerability in Fortinet Forticlient, classified under Download of Code Without Integrity Check. CVSS score: 7.3/10. Published 2023-04-11.
How severe is CVE-2023-22635?: High severity. CVSS v3 base score is 7.3 out of 10.