Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-98184
HistoryNov 17, 2023 - 12:00 a.m.

Fortinet FortiEDR Access Control Error Vulnerability (CNVD-2023-98184)

2023-11-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
fortinet fortiedr
access control
vulnerability
collector windows
improper access controls
local attacker
registry entries
system reboot

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Fortinet FortiEDR is an endpoint security solution built from the ground up by Fortinet. An Access Control Error vulnerability exists in Fortinet FortiEDR Collector Windows that stems from the presence of improper access controls in the application. A local attacker could exploit the vulnerability to prevent the Collector service from starting on the next system reboot by tampering with certain registry entries of the service.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CNVD-2023-98184