b2b-daily
Home | IT | Cyber Security

Fortinet Rolls Out Patches for Severe FortiClientLinux Flaw

Avatar photo
by Craig Anderson
April 12, 2024
Fortinet Rolls Out Patches for Severe FortiClientLinux Flaw

Fortinet, a leader in network security, has issued important patches to address a dangerous flaw found in its FortiClientLinux offering, designated as CVE-2023-45590. With a high severity score of 9.4, the vulnerability poses significant risks, as it could allow attackers to inject code and execute it remotely. This threat becomes active when users visit a malicious site while running the affected software.

The security lapse affects FortiClientLinux versions from 7.0.3 to 7.0.4 and from 7.0.6 to 7.0.10, as well as the singular version 7.2.0. Users are urged to update their software to either version 7.0.11 or 7.2.1 to guard against potential attacks. Discovered by researcher CataLpa from Dbappsecurity, the flaw is due to an improper Node.js configuration in the software.

This incident highlights the continuous struggle against cyber threats that exploit such vulnerabilities. In an ever-evolving digital landscape, such incidents serve as a stern reminder for organizations and users alike to stay vigilant and promptly apply security updates to safeguard their systems from such exploitable weaknesses.

Comprehensive Response to Multiple Security Challenges

Fortinet’s vigilant response to cyber threats has led to a comprehensive April 2023 security overhaul, which now includes macOS in addition to Linux. The focus was on rectifying vulnerabilities in the FortiClientMac installer, denoted as CVE-2023-45588 and CVE-2023-31492, each with a concerning CVSS score of 7.8. Concurrently, FortiOS and FortiProxy faced a critical issue identified by CVE-2023-41677, earning a CVSS score of 7.5, bringing to light a potential breach wherein administrator cookies could be compromised, potentially leading to unauthorized administrative control.

This update arrives without any direct evidence of these vulnerabilities being exploited, but it serves as a stark reminder of the relentless nature of cyber threats. IT administrators are urged to effectuate these security updates promptly, cementing the safeguarding of their digital infrastructures. In the game of cyber warfare, the offense is constantly evolving; in response, so must the defense, with timely and consistent updates serving as a key element in a robust cybersecurity protocol.

Information Security

Explore more

A Unified Framework for SRE, DevSecOps, and Compliance
February 13, 2026

The relentless demand for continuous innovation forces modern SaaS companies into a high-stakes balancing act, where a single misconfigured container or a vulnerable dependency can instantly transform a competitive advantage into a catastrophic system failure or a public breach of trust. This reality underscores a critical shift in software development: the old model of treating speed, security, and stability as

AI Security Requires a New Authorization Model
February 13, 2026

Today we’re joined by Dominic Jainy, an IT professional whose work at the intersection of artificial intelligence and blockchain is shedding new light on one of the most pressing challenges in modern software development: security. As enterprises rush to adopt AI, Dominic has been a leading voice in navigating the complex authorization and access control issues that arise when autonomous

Canadian Employers Face New Payroll Tax Challenges
February 13, 2026

The quiet hum of the payroll department, once a symbol of predictable administrative routine, has transformed into the strategic command center for navigating an increasingly turbulent regulatory landscape across Canada. Far from a simple function of processing paychecks, modern payroll management now demands a level of vigilance and strategic foresight previously reserved for the boardroom. For employers, the stakes have

How to Perform a Factory Reset on Windows 11
February 13, 2026

Every digital workstation eventually reaches a crossroads in its lifecycle, where persistent errors or a change in ownership demands a return to its pristine, original state. This process, known as a factory reset, serves as a definitive solution for restoring a Windows 11 personal computer to its initial configuration. It systematically removes all user-installed applications, personal data, and custom settings,

What Will Power the New Samsung Galaxy S26?
February 13, 2026

As the smartphone industry prepares for its next major evolution, the heart of the conversation inevitably turns to the silicon engine that will drive the next generation of mobile experiences. With Samsung’s Galaxy Unpacked event set for the fourth week of February in San Francisco, the spotlight is intensely focused on the forthcoming Galaxy S26 series and the chipset that