An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter (Windows) versions 6.2.0 through 6.2.1, 7.0.0 and all versions of 6.0.0 may allow a local authenticated attacker to tamper with files in the installation folder, if FortiClient or FortiConverter is installed in an insecure folder.
References
Link | Resource |
---|---|
https://fortiguard.com/psirt/FG-IR-22-229 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2023, 01:38
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://fortiguard.com/psirt/FG-IR-22-229 - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
CWE | CWE-276 | |
CPE | cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* cpe:2.3:a:fortinet:forticonverter:6.2.0:*:*:*:*:windows:*:* cpe:2.3:a:fortinet:forticonverter:*:*:*:*:*:windows:*:* cpe:2.3:a:fortinet:forticonverter:7.0.0:*:*:*:*:windows:*:* cpe:2.3:a:fortinet:forticonverter:6.2.1:*:*:*:*:windows:*:* |
13 Jun 2023, 09:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-06-13 09:15
Updated : 2024-02-04 23:37
NVD link : CVE-2022-33877
Mitre link : CVE-2022-33877
CVE.ORG link : CVE-2022-33877
JSON object : View
Products Affected
fortinet
- forticlient
- forticonverter
CWE
CWE-276
Incorrect Default Permissions