Fortinet FortiClient Information Disclosure Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. An information disclosure vulnerability exists in Fortin...

Console window of FortiClient for Mac OS displays password in clear-text.

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

Fortinet FortiClient for macOS CVE-2019-15704 Local Information Disclosure Vulnerability

Description Fortinet FortiClient for macOS is prone to a local information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. Versions prior to FortiClient for macOS 6.0.8 and 6.2.1 are vulnerable. Technologies...

Fortinet FortiClient Command Injection Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A command injection vulnerability exists in a root proce...

Command injection vulnerability in FortiClient for Mac OS

An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check...

Fortinet FortiClient for macOS CVE-2019-17650 Local Command Injection Vulnerability

Description Fortinet FortiClient for macOS is prone to a local command-injection vulnerability. An attacker may exploit this issue to inject and execute arbitrary commands with root privileges. Versions prior to FortiClient for macOS 6.2.2 are vulnerable. Technologies Affected Fortinet FortiClien...

CVE-2019-6692

A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via forging that DLL...

CVE-2019-6692

A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via forging that DLL...

Design/Logic Flaw

A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via forging that DLL...

CVE-2019-6692

A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via forging that DLL...

CVE-2019-6692

A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via forging that DLL...

CVE-2019-6692

Fortinet FortiClient for Windows

FortiClient Windows Service or Process Tampering

FortiClient for Windows could be subject to the following shut down or tampering attempts:...

Fortinet FortiClient Enterprise Management Server Cross-Site Scripting Vulnerability

Fortinet FortiClient Enterprise Management Server EMS is a FortiClient Enterprise Manager from Fortinet. It is designed for scalable and centralized management of multiple FortiClients. A cross-site scripting vulnerability exists in Fortinet FortiClient EMS 6.2.0 and earlier versions, which stems...

PT-2019-6280 · Fortinet · Forticlient Enterprise Management Server

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClient Enterprise Management Server EMS affected versions not specified Description: The issue is related to the lack of protection measures for the web page structure during its creation, which can be exploited by a remote...

The vulnerability of the executable file FortiClientOnlineInstaller.exe of the Fortinet FortiClient for Windows security device allows a perpetrator to execute arbitrary code.

The vulnerability of the FortiClientOnlineInstaller.exe executable component of the Fortinet FortiClient for Windows security device is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code using a specially created DLL file...

Code injection

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates...

CVE-2018-9193

A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, which allows a user to gain system privileges on Microsoft Windows...

CVE-2018-13368

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the command injection...

CVE-2018-9193

A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, which allows a user to gain system privileges on Microsoft Windows...