CVE-2021-41031

A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service.
References
Link Resource
https://fortiguard.com/advisory/FG-IR-21-190 Broken Link Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*

History

25 Jul 2022, 14:30

Type Values Removed Values Added
References (CONFIRM) https://fortiguard.com/advisory/FG-IR-21-190 - (CONFIRM) https://fortiguard.com/advisory/FG-IR-21-190 - Broken Link, Patch, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-22
CPE cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*

18 Jul 2022, 18:48

Type Values Removed Values Added
New CVE

Information

Published : 2022-07-18 18:15

Updated : 2024-02-04 22:51


NVD link : CVE-2021-41031

Mitre link : CVE-2021-41031

CVE.ORG link : CVE-2021-41031


JSON object : View

Products Affected

fortinet

  • forticlient
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')