Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jf9v-69vw-p2r3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

EPSS

Процентиль: 15%
0.00049
Низкий

Связанные уязвимости

CVSS3: 7.8
nvd
почти 6 лет назад

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

CVSS3: 7.8
fstec
больше 6 лет назад

Уязвимость исполняемого файла установки FortiClientEMSOnlineInstaller.exe сервера для управления программами Fortinet FortiClient Enterprise Management Server (EMS), позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 15%
0.00049
Низкий