Path traversal

2021-12-0112:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.6%

JSON

An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.

CPENameOperatorVersion
forticlientge6.0.0
forticlientle6.0.9
forticlientge6.4.0
forticlientlt6.4.7
forticlienteq7.0.0
forticlientge6.2.0
forticlientle6.2.9
forticlient_enterprise_management_serverge6.2.0
forticlient_enterprise_management_serverle6.2.9
forticlient_enterprise_management_serverge6.0.0

Name	Operator	Version
forticlient	ge	6.0.0
forticlient	le	6.0.9
forticlient	ge	6.4.0
forticlient	lt	6.4.7
forticlient	eq	7.0.0
forticlient	ge	6.2.0
forticlient	le	6.2.9
forticlient_enterprise_management_server	ge	6.2.0
forticlient_enterprise_management_server	le	6.2.9
forticlient_enterprise_management_server	ge	6.0.0

Rows per page:

1-10 of 141

References

fortiguard.com/advisory/FG-IR-21-088