CVE-2019-17658

2020-03-1221:26:00

fortinet

www.cve.org

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path.

CNA Affected

[
  {
    "product": "Fortinet FortiClientWindows",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.2 and prior"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-19-281