CVE-2019-15711

2020-02-0615:10:07

fortinet

www.cve.org

0.001 Low

EPSS

Percentile

20.2%

JSON

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted “ExportLogs” type IPC client requests to the fctsched process.

CNA Affected

[
  {
    "product": "Fortinet FortiClientLinux",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiClientLinux 6.2.1 and below"
      }
    ]
  }
]

References

danishcyberdefence.dk/blog/forticlient_linux

fortiguard.com/psirt/FG-IR-19-238

0.001 Low

EPSS

Percentile

20.2%

JSON

Related for CVELIST:CVE-2019-15711