CVE-2019-15711

CWE-20 — Improper Input Validation CWE-787 — Out-of-bounds Write4 documents4 sources

Severity

7.8HIGH

EPSS

0.1%

top 68.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Fortinet Forticlient Fortinet Fortinet Forticlientlinux

Timeline

PublishedFeb 6

Latest updateMay 24

Description

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5fortinet/fortinet_forticlientlinuxFortiClientLinux 6.2.1 and below

▶NVDfortinet/forticlient6.2.1

🔴Vulnerability Details

GHSA

GHSA-6575-cx73-cx56: A privilege escalation vulnerability in FortiClient for Linux 6↗2022-05-24

▶

CVEList

CVE-2019-15711: A privilege escalation vulnerability in FortiClient for Linux 6↗2020-02-06

▶

📋Vendor Advisories

Fortinet

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to ru...↗2020-02-06

▶