Skip to content
OpenAdvisories
Unscored CVE-2019-15711 EUVD-2019-6647GHSA-6575-cx73-cx56

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands u…

Published Feb 6, 2020 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiClientLinux Category: Network devices

Description

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiClientLinux FortiClientLinux 6.2.1 and below —

References