PT-2020-9939
CVE-2019-17658
·
Published
2020-03-12
·
Updated
2021-04-29
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FortiClientWindows versions 6.2.2 and prior
Description
The issue is related to an unquoted service path vulnerability in the FortiTray component, allowing an attacker to gain elevated privileges via the FortiClientConsole executable service path.
Recommendations
For FortiClientWindows versions 6.2.2 and prior, update to a version that contains a fix for this issue to prevent exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾