FortiClient – Privilege escalation in FortiClient installer

https://ift.tt/UB1kKze

An external control of file name or path vulnerability [CWE-73] in FortiClient Windows may allow an unprivileged attacker to delete or execute files with admin rights via the MSI installer.

Security,networks

via FortiGuard Labs | FortiGuard Center – IR Advisories https://ift.tt/8yQ4nfS

May 3, 2022 at 03:18PM