CVE-2021-43066

Published: May 11, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer.

Affected (2)

Products: Fortinet: Forticlient

Fortinet

1 product

Forticlient

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Forticlient	From 6.0.0 to 6.4.7
Fortinet Forticlient	From 7.0.0 to 7.0.3

Related CWEs

CWE-668

Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (2)

https://fortiguard.com/advisory/FG-IR-21-154

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/advisory/FG-IR-21-154

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.