CVE-2015-1458 — Fortinet Fortiauthenticator vulnerability

CWE-2643 documents3 sources
Severity
6.9MEDIUMNVD
EPSS
0.1%
top 80.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Fortinet Fortiauthenticator
Timeline
PublishedFeb 3
Latest updateMay 17

Description

Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tmp/privexec/dbgcore_enable_shell_access and executing the "shell" command.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-5hcj-2v7m-qwqf: Fortinet FortiAuthenticator 3↗2022-05-17
▶
CVEList
CVE-2015-1458: Fortinet FortiAuthenticator 3↗2015-02-03
▶
CVE-2015-1458 — Fortinet vulnerability | cvebase