b2b-daily
Home | IT | Cyber Security

Fortinet Rolls Out Patches for Severe FortiClientLinux Flaw

Avatar photo
by Craig Anderson
April 12, 2024
Fortinet Rolls Out Patches for Severe FortiClientLinux Flaw

Fortinet, a leader in network security, has issued important patches to address a dangerous flaw found in its FortiClientLinux offering, designated as CVE-2023-45590. With a high severity score of 9.4, the vulnerability poses significant risks, as it could allow attackers to inject code and execute it remotely. This threat becomes active when users visit a malicious site while running the affected software.

The security lapse affects FortiClientLinux versions from 7.0.3 to 7.0.4 and from 7.0.6 to 7.0.10, as well as the singular version 7.2.0. Users are urged to update their software to either version 7.0.11 or 7.2.1 to guard against potential attacks. Discovered by researcher CataLpa from Dbappsecurity, the flaw is due to an improper Node.js configuration in the software.

This incident highlights the continuous struggle against cyber threats that exploit such vulnerabilities. In an ever-evolving digital landscape, such incidents serve as a stern reminder for organizations and users alike to stay vigilant and promptly apply security updates to safeguard their systems from such exploitable weaknesses.

Comprehensive Response to Multiple Security Challenges

Fortinet’s vigilant response to cyber threats has led to a comprehensive April 2023 security overhaul, which now includes macOS in addition to Linux. The focus was on rectifying vulnerabilities in the FortiClientMac installer, denoted as CVE-2023-45588 and CVE-2023-31492, each with a concerning CVSS score of 7.8. Concurrently, FortiOS and FortiProxy faced a critical issue identified by CVE-2023-41677, earning a CVSS score of 7.5, bringing to light a potential breach wherein administrator cookies could be compromised, potentially leading to unauthorized administrative control.

This update arrives without any direct evidence of these vulnerabilities being exploited, but it serves as a stark reminder of the relentless nature of cyber threats. IT administrators are urged to effectuate these security updates promptly, cementing the safeguarding of their digital infrastructures. In the game of cyber warfare, the offense is constantly evolving; in response, so must the defense, with timely and consistent updates serving as a key element in a robust cybersecurity protocol.

Information Security

Explore more

AI Makes Small Businesses a Top Priority for CX
January 7, 2026

The Dawn of a New Era Why Smbs Are Suddenly in the Cx Spotlight A seismic strategic shift is reshaping the customer experience (CX) industry, catapulting small and medium-sized businesses (SMBs) from the market’s periphery to its very center. What was once a long-term projection has become today’s reality, with SMBs now established as a top priority for CX technology

Is the Final Click the New Q-Commerce Battlefield?
January 7, 2026

Redefining Speed: How In-App UPI Elevates the Quick-Commerce Experience In the hyper-competitive world of quick commerce, where every second counts, the final click to complete a purchase is the most critical moment in the customer journey. Quick-commerce giant Zepto has made a strategic move to master this moment by launching its own native Unified Payments Interface (UPI) feature. This in-app

Will BNPL Rules Protect or Punish the Vulnerable?
January 7, 2026

The United Kingdom’s Buy-Now-Pay-Later (BNPL) landscape is undergoing a seismic shift as it transitions from a largely unregulated space into a formally supervised sector. What began as a frictionless checkout option has morphed into a financial behemoth, with nearly 23 million users and a market projected to hit £28 billion. This explosive growth has, until now, occurred largely in a

Invisible Finance Is Remaking Global Education
January 7, 2026

The most significant financial transaction in a young person’s life is often their first tuition payment, a process historically defined by bureaucratic hurdles, opaque fees, and cross-border complexities that create barriers before the first lecture even begins. This long-standing friction is now being systematically dismantled by a quiet but powerful revolution in financial technology. A new paradigm, often termed Embedded

Why Is Indonesia Quietly Watching Your Payments?
January 7, 2026

A seemingly ordinary cross-border payment for management services, once processed without a second thought, now has the potential to trigger a cascade of regulatory inquiries from multiple government agencies simultaneously. This is the new reality for foreign companies operating in Indonesia, where a profound but unannounced transformation in financial surveillance is underway. It is a shift defined not by new