CVE-2024-35282 LOW

CVE-2024-35282

Vendor Fortinet
Product FortiClientiOS
Weakness CWE-316
Published September 10, 2024
Last update January 14, 2026
View on NVD All CVEs

CVSS base score

3.9/10
Attack vector Physical
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C

What the vulnerability does

01Description

A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain cleartext passwords via keychain dump.

Key dates

02Disclosure timeline

September 10, 2024 CVE published
January 14, 2026 Record updated