Lucene search

K
fortinetFortiGuard LabsFG-IR-22-429
HistoryApr 11, 2023 - 12:00 a.m.

FortiClient (Windows) - Improper write access over FortiClient pipe object

2023-04-1100:00:00
FortiGuard Labs
www.fortiguard.com
42
forticlient
windows
vulnerability
permission assignment
cwe-732
time-of-check
time-of-use
cwe-367
file sharing network
commands.

0.001 Low

EPSS

Percentile

48.2%

Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time-of-use (TOCTOU) race condition [CWE-367] vulnerability in FortiClientWindows may allow an attacker on the same file sharing network to execute commands via writing data into a windows pipe.

0.001 Low

EPSS

Percentile

48.2%

Related for FG-IR-22-429