Command Injection Vulnerability in FortiClient for Mac OS by Fortinet
CVE-2019-17650

7.8HIGH

Key Information:

Vendor
Fortinet
Status
Forticlient For Mac Os
Vendor
CVE Published:
21 November 2019

Summary

A vulnerability exists in FortiClient for Mac OS that allows a local user to exploit improper neutralization of special elements used in commands. This leads to the potential execution of unauthorized code with root privileges by bypassing critical security checks, making systems running the FortiClient software susceptible to malicious activities.

Affected Version(s)

FortiClient for Mac OS FortiClient for Mac OS 6.2.1

References

https://fortiguard.com/advisory/FG-IR-19-210
x_refsource_CONFIRM
https://danishcyberdefence.dk/blog/forticlient_mac
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.