PT-2021-9846
CVE-2020-15941
·
تاريخ النشر
2021-10-06
·
تاريخ التحديث
2021-10-14
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
FortiClientEMS versions 6.4.1 and below
FortiClientEMS versions 6.2.8 and below
Description
A path traversal issue in FortiClientEMS may allow an authenticated attacker to inject directory traversal character sequences, enabling them to add or delete server files via the
name parameter of Deployment Packages.Recommendations
For FortiClientEMS versions 6.4.1 and below, update to a version above 6.4.1 to resolve the issue.
For FortiClientEMS versions 6.2.8 and below, update to a version above 6.2.8 to resolve the issue.
As a temporary workaround, consider restricting access to the
name parameter of Deployment Packages to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾