FortiClient (Windows) - Arbitrary file write as SYSTEM

2022-06-0700:00:00

FortiGuard Labs

www.fortiguard.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows may allow a local attacker to perform an arbitrary file write on the system.

CPENameOperatorVersion
forticlientwindowseq7.0.3
forticlientwindowseq7.0.2
forticlientwindowseq7.0.1
forticlientwindowseq7.0.0
forticlientwindowseq6.4.7
forticlientwindowseq6.4.6
forticlientwindowseq6.4.5
forticlientwindowseq6.4.4
forticlientwindowseq6.4.3
forticlientwindowseq6.4.2

Name	Operator	Version
forticlientwindows	eq	7.0.3
forticlientwindows	eq	7.0.2
forticlientwindows	eq	7.0.1
forticlientwindows	eq	7.0.0
forticlientwindows	eq	6.4.7
forticlientwindows	eq	6.4.6
forticlientwindows	eq	6.4.5
forticlientwindows	eq	6.4.4
forticlientwindows	eq	6.4.3
forticlientwindows	eq	6.4.2

Rows per page:

1-10 of 331

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for FG-IR-22-044