FortiClient for Windows Insecure Temporary File vulnerability

2020-05-2500:00:00

FortiGuard Labs

www.fortiguard.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

An Insecure Temporary File (CWE-377) vulnerability in FortiClient for Windows may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack.

CPENameOperatorVersion
forticlientwindowseq6.2.1
forticlientwindowseq6.2.0
forticlientwindowseq6.0.9
forticlientwindowseq6.0.8
forticlientwindowseq6.0.7
forticlientwindowseq6.0.6
forticlientwindowseq6.0.5
forticlientwindowseq6.0.4
forticlientwindowseq6.0.3
forticlientwindowseq6.0.2

Name	Operator	Version
forticlientwindows	eq	6.2.1
forticlientwindows	eq	6.2.0
forticlientwindows	eq	6.0.9
forticlientwindows	eq	6.0.8
forticlientwindows	eq	6.0.7
forticlientwindows	eq	6.0.6
forticlientwindows	eq	6.0.5
forticlientwindows	eq	6.0.4
forticlientwindows	eq	6.0.3
forticlientwindows	eq	6.0.2

Rows per page:

1-10 of 131

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for FG-IR-20-040