CVEvulnerability
CVE-2019-15711
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.
Affected configurations
• fortinet forticlient (<= 6.2.1)
References
- https://danishcyberdefence.dk/blog/forticlient_linux Exploit, Third Party Advisory
- https://fortiguard.com/psirt/FG-IR-19-238 Vendor Advisory
- https://danishcyberdefence.dk/blog/forticlient_linux Exploit, Third Party Advisory
- https://fortiguard.com/psirt/FG-IR-19-238 Vendor Advisory