Lucene search
FortiGuard LabsFG-IR-20-079HistoryNov 02, 2021 - 12:00 a.m.
FortiClient (Windows) - Privilege escalation vulnerability
2021-11-0200:00:00
FortiGuard Labs
www.fortiguard.com
12
0.0004 Low
EPSS
Percentile
12.8%
An improper authorization vulnerability [CWE-285] in FortiClient for Windows may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for Forticlient updates.
| CPE | Name | Operator | Version |
|---|---|---|---|
| forticlientwindows | eq | 7.0.1 | |
| forticlientwindows | eq | 7.0.0 | |
| forticlientwindows | eq | 6.4.2 | |
| forticlientwindows | eq | 6.4.1 | |
| forticlientwindows | eq | 6.4.0 |
Related
cvelist
cvelist
CVE-2021-36183
2021-11-02 18:41:28
nessus
nessus
Fortinet FortiClient (FG-IR-20-079)
2021-12-02 00:00:00
cve
cve
CVE-2021-36183
2021-11-02 19:15:07
nvd
nvd
CVE-2021-36183
2021-11-02 19:15:07
prion
prion
Authorization
2021-11-02 19:15:00