864 matches found
CVE-2017-7344
CVE-2017-7344 describes a privilege escalation in Fortinet FortiClient Windows versions 5.4.3 and earlier and 5.6.0. An attacker can exploit the Windows “security alert” dialog when VPN before logon is enabled and an untrusted certificate chain to gain SYSTEM-level privileges. Exploitation can be...
Fortinet FortiClient VPN Credential Disclosure Vulnerability
FortiClient stores the VPN authentication credentials in a configuration file on Linux or Mac OSX or in registry on Windows. The credentials are encrypted but can still be recovered since the decryption key is hardcoded in the program and the same on all installations. Above all, the aforemention...
Gain Windows privileges with FortiClient vpn before logon and untrusted certificate
When the "VPN before logon" feature of FortiClient Windows is enabled disabled by default, and when the server certificate is not valid, it is possible for an attacker without a user account on the targeted Windows workstation to obtain SYSTEM level privileges, via exploiting the Windows "securi...
Fortinet FortiClient VPN Credential Disclosure
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: VPN credentials disclosure product: Fortinet FortiClient vulnerable version: 4.4.2335 on Linux, 5.6.1 on Windows, 5.6.1 on Mac OSX fixed version: 4.4.2335 on Linux, 5.6.1...
Fortinet FortiClient Elevation of Privilege Vulnerability
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. An elevation of privilege vulnerability exists in Fortin...
FortiClient privilege escalation vulnerability
A low privileged user may be able to execute arbitrary code by exploiting a FortiClientNamedPipe vulnerability...
CVE-2016-8493
In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability...
Privilege escalation
In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability...
Fortinet FortiClient SSL_VPN for Linux Remote Code Execution Vulnerability
Fortinet FortiClient SSLVPN for Linux is a Linux-based VPN client for connecting to Fortinet devices. A remote code execution vulnerability exists in Fortinet FortiClient SSLVPN for Linux. An attacker can exploit this vulnerability to overwrite arbitrary files with FortiClient log files...
FortiClient SSLVPN Privilege Elevation Vulnerability
Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An elevation of privilege vulnerability exists in FortiClient SSLVPN. An attacker can exploit this vulnerability to gain root privileges...
FortiClient SSLVPN Linux - Arbitrary write to log file
The first launch of FortiClient SSLVPN Linux creates a log file without any prior check. By previously creating a symbolic or hard link with the name of the log file to any file in the filesystem, an attacker may smash the latter existing file. This is due to the fact that the first launch of...
FortiClient SSLVPN Linux - Root privilege escalation with subproc
Fortinet is pleased to thank Grzegorz Wrobel of STMSolutions for reporting this vulnerability under responsible disclosure...
Fortinet FortiClient 5.2.3 (Windows 10 x64 Pre-Anniversary) - Local Privilege Escalation
Fortinet FortiClient 5.2.3 Windows 10 x64 Pre-Anniversary - Local Privilege Escalation / Check this out: - https://www.coresecurity.com/system/files/publications/2016/05/Windows%20SMEP%20bypass%20U%3DS.pdf Tested on: - Windows 10 Pro x64 Pre-Anniversary - hal.dll: 10.0.10240.16384 -...
Fortinet FortiClient 5.2.3 (Windows 10 x64 Post-Anniversary) - Local Privilege Escalation
/ Check these out: - https://www.coresecurity.com/system/files/publications/2016/05/Windows%20SMEP%20bypass%20U%3DS.pdf - https://labs.mwrinfosecurity.com/blog/a-tale-of-bitmaps/ Tested on: - Windows 10 Pro x64 Post-Anniversary - ntoskrnl.exe: 10.0.14393.953 - FortiShield.sys: 5.2.3.633 Thanks to...
Forticlient 5.2.3 Windows 10 x64 (Post Anniversary) - Privilege Escalation Exploit
Exploit for windows platform in category local exploits / Check these out: - https://www.coresecurity.com/system/files/publications/2016/05/Windows%20SMEP%20bypass%20U%3DS.pdf - https://labs.mwrinfosecurity.com/blog/a-tale-of-bitmaps/ Tested on: - Windows 10 Pro x64 Post-Anniversary - hal.dll:...
Fortinet FortiClient 5.2.3 (Windows 10 x64 Post-Anniversary) - Local Privilege Escalation
Fortinet FortiClient 5.2.3 Windows 10 x64 Post-Anniversary - Local Privilege Escalation / Check these out: - https://www.coresecurity.com/system/files/publications/2016/05/Windows%20SMEP%20bypass%20U%3DS.pdf - https://labs.mwrinfosecurity.com/blog/a-tale-of-bitmaps/ Tested on: - Windows 10 Pro x6...
Fortinet FortiClient 5.2.3 (Windows 10 x86) - Local Privilege Escalation
/ Check these out: - https://www.coresecurity.com/system/files/publications/2016/05/Windows%20SMEP%20bypass%20U%3DS.pdf - https://labs.mwrinfosecurity.com/blog/a-tale-of-bitmaps/ Tested on: - Windows 10 Pro x86 1703/1709 - ntoskrnl.exe: 10.0.16299.309 - FortiShield.sys: 5.2.3.633 Compile: -...
Fortinet FortiClient 5.2.3 (Windows 10 x86) - Local Privilege Escalation
Fortinet FortiClient 5.2.3 Windows 10 x86 - Local Privilege Escalation...
Fortinet FortiClient Unsupported Version Detection (macOS)
According to its self-reported version number, the installation of Fortinet FortiClient on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...