Medium · 6.7 CVE-2021-26089 EUVD-2021-12910GHSA-778f-2fc2-jrq9

An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell…

Published Jul 12, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiClientMac Category: Network devices

Description

An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiClientMac	FortiClientMac 6.4.3 and below	—

References

https://fortiguard.com/advisory/FG-IR-21-022
https://www.zerodayinitiative.com/advisories/ZDI-22-078/