Fortinet FortiClient Path Traversal Vulnerability (CNVD-2023-98182)

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A path traversal vulnerability exists in Fortinet FortiClient, which stems from the presence of an untrusted search path. An attacker could use this vulnerability to perform a DLL hijacking attack via a malicious OpenSSL engine library in the search path.