Privilege Escalation in Fortinet FortiAuthenticator Product

CVE-2015-1458

Summary

The Fortinet FortiAuthenticator 3.0.0 has a vulnerability that allows local users to bypass intended security restrictions. By creating a specific file in the /tmp/privexec directory and executing the 'shell' command, malicious actors can gain unauthorized privileges on the device. This bypass effectively compromises the integrity of the system, highlighting the critical need for prompt security action and system updates.

References