CVE-2019-15711

Summary

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.

Affected Software

Weaknesses

• Escalation of privilege

ADP Enrichment

CVE Program Container

Additional References

• https://fortiguard.com/psirt/FG-IR-19-238
• https://danishcyberdefence.dk/blog/forticlient_linux

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://fortiguard.com/psirt/FG-IR-19-238
• https://danishcyberdefence.dk/blog/forticlient_linux

• ←Previous
• Next→