CVE-2023-41840

A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path.
References
Link Resource
https://fortiguard.com/psirt/FG-IR-23-274 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:forticlient:7.0.9:*:*:*:*:windows:*:*
cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*
cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:windows:*:*

History

21 Nov 2023, 01:38

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-14 18:15

Updated : 2024-02-05 00:22


NVD link : CVE-2023-41840

Mitre link : CVE-2023-41840

CVE.ORG link : CVE-2023-41840


JSON object : View

Products Affected

fortinet

  • forticlient
CWE
CWE-426

Untrusted Search Path