Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mc4-h6fw-r59x

Опубликовано: 12 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

EPSS

Процентиль: 47%
0.0024
Низкий

7.5 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 6.8
nvd
больше 3 лет назад

An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links.

EPSS

Процентиль: 47%
0.0024
Низкий

7.5 High

CVSS3

Дефекты

CWE-732