Fortinet FortiClient Privilege Escalation via directory traversal attack (FG-IR-21-190)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-190 advisory. - A relative path traversal vulnerability CWE-23 in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and...

CVE-2021-41031

A relative path traversal vulnerability CWE-23 in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service...

CVE-2021-41031

CVE-2021-41031 concerns FortiClient for Windows (versions 7.0.2 and prior, 6.4.6 and prior, 6.2.9 and below). A relative path traversal via the FortiESNAC service named pipe allows a local unprivileged attacker to escalate to SYSTEM. Connected sources (Fortinet FG-IR-21-190, Red Hat advisory, NVD...