b2b-daily
Home | IT | Cyber Security

Fortinet Rolls Out Patches for Severe FortiClientLinux Flaw

Avatar photo
by Craig Anderson
April 12, 2024
Fortinet Rolls Out Patches for Severe FortiClientLinux Flaw

Fortinet, a leader in network security, has issued important patches to address a dangerous flaw found in its FortiClientLinux offering, designated as CVE-2023-45590. With a high severity score of 9.4, the vulnerability poses significant risks, as it could allow attackers to inject code and execute it remotely. This threat becomes active when users visit a malicious site while running the affected software.

The security lapse affects FortiClientLinux versions from 7.0.3 to 7.0.4 and from 7.0.6 to 7.0.10, as well as the singular version 7.2.0. Users are urged to update their software to either version 7.0.11 or 7.2.1 to guard against potential attacks. Discovered by researcher CataLpa from Dbappsecurity, the flaw is due to an improper Node.js configuration in the software.

This incident highlights the continuous struggle against cyber threats that exploit such vulnerabilities. In an ever-evolving digital landscape, such incidents serve as a stern reminder for organizations and users alike to stay vigilant and promptly apply security updates to safeguard their systems from such exploitable weaknesses.

Comprehensive Response to Multiple Security Challenges

Fortinet’s vigilant response to cyber threats has led to a comprehensive April 2023 security overhaul, which now includes macOS in addition to Linux. The focus was on rectifying vulnerabilities in the FortiClientMac installer, denoted as CVE-2023-45588 and CVE-2023-31492, each with a concerning CVSS score of 7.8. Concurrently, FortiOS and FortiProxy faced a critical issue identified by CVE-2023-41677, earning a CVSS score of 7.5, bringing to light a potential breach wherein administrator cookies could be compromised, potentially leading to unauthorized administrative control.

This update arrives without any direct evidence of these vulnerabilities being exploited, but it serves as a stark reminder of the relentless nature of cyber threats. IT administrators are urged to effectuate these security updates promptly, cementing the safeguarding of their digital infrastructures. In the game of cyber warfare, the offense is constantly evolving; in response, so must the defense, with timely and consistent updates serving as a key element in a robust cybersecurity protocol.

Information Security

Explore more

Is AI Fueling Microsoft’s Record-Breaking 570 Patches?
July 15, 2026

The sheer volume of security vulnerabilities emerging within the enterprise ecosystem has reached a critical inflection point, forcing a fundamental reassessment of how major software vendors manage their codebases. As Microsoft crosses the threshold of issuing 570 distinct patches within a single reporting cycle, industry analysts are looking closely at the underlying drivers of this surge. A primary suspect in

Claude or GitHub Copilot: Which Is Best for Your Enterprise?
July 15, 2026

The current landscape of corporate technology has shifted fundamentally as generative artificial intelligence moves from being a speculative novelty to a central pillar of global production infrastructure. Today’s enterprises are no longer merely experimenting with automation or basic chatbots; they are actively integrating sophisticated “smart workers” directly into their most sensitive IT frameworks to maintain a competitive edge. This evolution

How AI Revolutionizes Social Media Analytics in 2026
July 15, 2026

The rapid integration of generative models into social media infrastructure has fundamentally altered how organizations interpret the chaotic flow of digital information. No longer are marketing professionals forced to manually sift through endless spreadsheets or rely on delayed monthly reports to understand consumer sentiment. Instead, the current technological environment provides a seamless stream of real-time intelligence that identifies shifts in

The Structural Shift Toward Creator Equity in B2B Marketing
July 15, 2026

The era of the transactional influencer campaign has reached a decisive turning point as sophisticated organizations begin to realize that renting an audience for a few weeks is far less effective than owning a share of the attention economy through permanent equity partnerships. For years, the standard operating procedure for Business-to-Business marketing involved paying flat fees for sponsored posts or

SMBs Must Adopt AI Defense to Match Rapid Cyber Threats
July 15, 2026

The sophisticated landscape of digital warfare has reached a point where manual intervention is no longer a viable primary defense mechanism for small and medium-sized enterprises. Cybercriminals are currently leveraging advanced automation and generative models to execute reconnaissance that used to take months in a matter of mere hours or even minutes. This shift in the threat actor’s playbook allows