A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service.
References
Link | Resource |
---|---|
https://fortiguard.com/advisory/FG-IR-21-190 | Broken Link Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Jul 2022, 14:30
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://fortiguard.com/advisory/FG-IR-21-190 - Broken Link, Patch, Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
CWE | CWE-22 | |
CPE | cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* |
18 Jul 2022, 18:48
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-07-18 18:15
Updated : 2024-02-04 22:51
NVD link : CVE-2021-41031
Mitre link : CVE-2021-41031
CVE.ORG link : CVE-2021-41031
JSON object : View
Products Affected
fortinet
- forticlient
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')