CVE-2015-1458

Currently unrated

Key Information:

Vendor
Fortinet
Status
Fortiauthenticator
Vendor
CVE Published:
3 February 2015

Summary

Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tmp/privexec/dbgcore_enable_shell_access and executing the "shell" command.

References

http://packetstormsecurity.com/files/130156/Fortinet-Fort...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/100559
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/72378
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.