FortiClient CVE-2024-3661 Access Control Bypass Vulnerability

Description

DHCP's classless static route option 121 can inject routes into a client's routing table, causing VPNs to leak traffic over the physical interface, letting local attackers read, disrupt, or modify traffic intended for the VPN. Affected: FortiClient, Cisco AnyConnect, Palo Alto GlobalProtect, Citrix Secure Access Client.

Affected Applications

FortiClient

References