FortiClient (Windows) - Privilege Escalation via directory traversal attack

2022-07-0500:00:00

FortiGuard Labs

www.fortiguard.com

0.0004 Low

EPSS

Percentile

9.9%

JSON

A relative path traversal vulnerability [CWE-23] in FortiClient for Windows may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service.

CPENameOperatorVersion
forticlientwindowseq7.0.2
forticlientwindowseq7.0.1
forticlientwindowseq7.0.0
forticlientwindowseq6.4.6
forticlientwindowseq6.4.5
forticlientwindowseq6.4.4
forticlientwindowseq6.4.3
forticlientwindowseq6.4.2
forticlientwindowseq6.4.1
forticlientwindowseq6.4.0

Name	Operator	Version
forticlientwindows	eq	7.0.2
forticlientwindows	eq	7.0.1
forticlientwindows	eq	7.0.0
forticlientwindows	eq	6.4.6
forticlientwindows	eq	6.4.5
forticlientwindows	eq	6.4.4
forticlientwindows	eq	6.4.3
forticlientwindows	eq	6.4.2
forticlientwindows	eq	6.4.1
forticlientwindows	eq	6.4.0

Rows per page:

1-10 of 201

0.0004 Low

EPSS

Percentile

9.9%

JSON

Related for FG-IR-21-190