Skip to content
OpenAdvisories
Medium · 4.4 CVE-2022-39949 EUVD-2022-42393GHSA-gxmc-34w7-fv72

An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 throug…

Published Nov 2, 2022 · Updated Oct 22, 2024 · Assigned by fortinet

Description

An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiEDR FortiEDR CollectorWindows 4.0.0  through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 —

References