CVE-2024-40586 Information

Description

An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0 version 7.2.6 and below version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe.

Reference

https://fortiguard.fortinet.com/psirt/FG-IR-23-279