Lucene search
PRIOn knowledge basePRION:CVE-2022-43946HistoryApr 11, 2023 - 5:15 p.m.
Race condition
2023-04-1117:15:00
PRIOn knowledge base
www.prio-n.com
130
race condition
incorrect permission assignment
cwe-732
toctou
cwe-367
windows
pipe
network
command execution
Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time-of-use (TOCTOU) race condition [CWE-367] vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute commands via writing data into a windows pipe.
| CPE | Name | Operator | Version |
|---|---|---|---|
| forticlient | ge | 6.0.0 | |
| forticlient | lt | 7.0.8 |
References
Related
zdi
zdi
nvd
nvd
CVE-2022-43946
2023-04-11 17:15:07
fortinet
fortinet
FortiClient (Windows) - Improper write access over FortiClient pipe object
2023-04-11 00:00:00
cve
cve
CVE-2022-43946
2023-04-11 17:15:07
nessus
nessus
Fortinet FortiClient pipe object (FG-IR-22-429)
2023-04-13 00:00:00
cvelist
cvelist
CVE-2022-43946
2023-04-11 16:06:46