Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9wx5-hqr2-rqpp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

EPSS

Процентиль: 15%
0.00049
Низкий

Связанные уязвимости

CVSS3: 7.8
nvd
почти 6 лет назад

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

CVSS3: 7.8
fstec
больше 6 лет назад

Уязвимость исполняемого файла установки FortiClientOnlineInstaller.exe средства защиты Fortinet FortiClient for Windows, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 15%
0.00049
Низкий