CVE-2024-50564

A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped.

Score

CVSS 3.1 3.3 Low

Status

Analyzed - psirt@fortinet.com

Published

2025-01-14

Last modified

2025-01-15

Weaknesses

CWE-321, CWE-798

Affected products

• Forticlient (Fortinet)
• Forticlientwindows (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-24-216