{"id":"CVE-2024-31489","state":"PUBLISHED","title":"AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11,  FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and Forti","description":"AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11,  FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and FortiClientMac 7.0.0 through 7.0.11, 7.2.0 through 7.2.4 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the FortiGate and the FortiClient during the ZTNA tunnel creation","publishedAt":"2024-09-10T14:37:48.066Z","updatedAt":"2024-09-10T17:52:01.310Z","severity":{"score":6.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:U/RC:C","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiClientMac","Fortinet FortiClientEMS","Fortinet FortiClientLinux","Fortinet FortiClientWindows"],"affected":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.4","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"semver"}],"cpes":[]},{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"}],"cpes":[]},{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"semver"}],"cpes":[]},{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.2","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"semver"}],"cpes":[]}],"references":["https://fortiguard.fortinet.com/psirt/FG-IR-22-282"],"weaknesses":["CWE-295"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/31xxx/CVE-2024-31489.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-31489","state":"PUBLISHED","datePublished":"2024-09-10T14:37:48.066Z","dateUpdated":"2024-09-10T17:52:01.310Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2024-04-04T12:52:41.585Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11,  FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and FortiClientMac 7.0.0 through 7.0.11, 7.2.0 through 7.2.4 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the FortiGate and the FortiClient during the ZTNA tunnel creation"}],"affected":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.4","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"semver"}],"cpes":[]},{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.13","versionType":"semver"}],"cpes":[]},{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"semver"}],"cpes":[]},{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.2","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"semver"}],"cpes":[]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-282","name":"https://fortiguard.fortinet.com/psirt/FG-IR-22-282"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:U/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","lang":"en","description":"Information disclosure","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2024-09-10T14:37:48.066Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiClientMac version 7.2.5 or above \nPlease upgrade to FortiClientMac version 7.0.12 or above \nPlease upgrade to FortiClientEMS version 7.2.0 or above \nPlease upgrade to FortiClientLinux version 7.2.1 or above \nPlease upgrade to FortiClientLinux version 7.0.12 or above \nPlease upgrade to FortiClientWindows version 7.2.3 or above \nPlease upgrade to FortiClientWindows version 7.0.12 or above"}]},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"fortinet","product":"forticlientmac","defaultStatus":"unknown","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.4","versionType":"custom"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"custom"}],"cpes":["cpe:2.3:a:fortinet:forticlientmac:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"forticlientlinux","defaultStatus":"unknown","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"custom"}],"cpes":["cpe:2.3:a:fortinet:forticlientlinux:*:*:*:*:*:*:*:*"]},{"vendor":"fortinet","product":"forticlientwindows","defaultStatus":"unknown","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.2","versionType":"custom"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"custom"}],"cpes":["cpe:2.3:a:fortinet:forticlientwindows:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-10T17:47:00.423144Z","id":"CVE-2024-31489","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-10T17:52:01.310Z"}}]}}}