FortiClient - Privilege escalation in FortiClient installer

2022-05-0300:00:00

FortiGuard Labs

www.fortiguard.com

0.0004 Low

EPSS

Percentile

12.6%

JSON

An external control of file name or path vulnerability [CWE-73] in FortiClient Windows may allow an unprivileged attacker to delete or execute files with admin rights via the MSI installer.

CPENameOperatorVersion
forticlientwindowseq7.0.2
forticlientwindowseq7.0.1
forticlientwindowseq7.0.0
forticlientwindowseq6.4.6
forticlientwindowseq6.4.5
forticlientwindowseq6.4.4
forticlientwindowseq6.4.3
forticlientwindowseq6.4.2
forticlientwindowseq6.4.1
forticlientwindowseq6.4.0

Name	Operator	Version
forticlientwindows	eq	7.0.2
forticlientwindows	eq	7.0.1
forticlientwindows	eq	7.0.0
forticlientwindows	eq	6.4.6
forticlientwindows	eq	6.4.5
forticlientwindows	eq	6.4.4
forticlientwindows	eq	6.4.3
forticlientwindows	eq	6.4.2
forticlientwindows	eq	6.4.1
forticlientwindows	eq	6.4.0

Rows per page:

1-10 of 311

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for FG-IR-21-154