CVE-2015-1458

Fortinet FortiAuthenticator 3.0.0 is affected by a local privilege escalation (CVE-2015-1458) where an attacker can bypass restrictions and gain privileges by creating /tmp/privexec/dbgcore_enable_shell_access and executing the shell command. The issue is documented across multiple sources (NVD e...

CVE-2015-1458

Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tmp/privexec/dbgcoreenableshellaccess and executing the "shell" command...